DNSSEC nuDwI'
DNSSEC Daq qoplu''a' je lI'bej'a' yInuD.
DNS qonmey DNSSEC ngaQHa'wI' chel — luchenmoHHa'meH (qaw' qIp, spoofing). jan vam lI'wI' ngo'wI' ghel, Daq DNSSEC ngaQHa'wI' (DNSKEY) qojaj'a' je voQ chain lI'bej'a' (AD flag) 'angmoH.
DNSSEC ghel motlh
DNSSEC (DNS Security Extensions) DNS jangmey ngaQHa'wI' chelbogh chel ghom 'oH. jang Daq lugh vo' ghoSbej je lurghDaq choHlu'be'pu' 'ol chaw'.
AD (Authenticated Data) bit 'oH, Daq DNSSEC voQ naQ lI'bejta'DI' lI'wI' ngo'wI' chenmoH. chenmoHlu'chugh, jang teH, luchenmoHHa'lu'be'.
DNSKEY qon ngaQHa'wI' chIm pol, zone qonmey qopmeH lo'lu'bogh. Daq DNSKEY qojbe'chugh, DNSSEC chu'be'.
motlh RRSIG ngaQHa'wI' 'el poH ghap vav (TLD) DS qon ngeb ghap Hutlhmo'. "bogus" DotlhvamDaq lI'wI' ngo'wI' jangmey luHotlhHa', vaj Daq SuchlaHbe'.
DNS DanIvmoH DaneH'a'?
DNS ngo'wI' pagh poQ nIvqu' yIwIv, tup puS neH DaqeS.