DNSSEC is a way to secure Domain Name Services, hence the name.
When you go on website www.internetsociety.be, your browser is translating this name to an Internet address, named IP address. But how to be sure this address is well our address and not something hijacked by someone else? Similarly, when you’re sending an email to someone, how to be sure email will be sent to the right destinator?
That is precisely the role of DNSSEC, Domain Name System Security Extensions, by digitally signing domain names.
Together with our sponsor and provider Rack66, we are currently working to sign our domain with DNSSEC.
Before you connect to a website, your browser has to retrieve the IP address of the site using DNS. However, it is possible for an attacker to intercept your DNS queries and provide false information that would cause your browser to connect to a fake website where you could potentially provide personal information (for example, what you think is a bank website). DNSSEC provides a level of additional security where the web browser can check to make sure the DNS information is correct and was not modified.