{"id":19005,"date":"2026-10-22T21:02:27","date_gmt":"2026-10-22T18:02:27","guid":{"rendered":"https:\/\/www.hyyat.com\/knowledgebase\/what-is-dnssec\/"},"modified":"2026-10-22T21:02:32","modified_gmt":"2026-10-22T18:02:32","password":"","slug":"what-is-dnssec","status":"publish","type":"docs","link":"https:\/\/www.hyyat.com\/en\/knowledgebase\/what-is-dnssec\/","title":{"rendered":"What Is DNSSEC and How Does It Protect Your Domain From DNS Spoofing?"},"content":{"rendered":"
\n
In short<\/b>When a visitor types your site name, their device asks DNS servers for its IP address. DNSSEC adds a digital signature to that answer, so the device can confirm it really came from your domain\u2019s servers and was not forged on the way. It is valuable for banks, stores and official bodies, but enabling it needs care, because a configuration mistake can make your domain stop resolving.<\/div>\n
\"DNSSEC:<\/figure>\n

DNS is old and was built on trust: the device asks, the server answers, with no way to confirm the answer is genuine. That allows an attack called DNS cache poisoning, where the attacker injects a fake answer and sends visitors to another server while the browser still shows your correct domain. Read what DNS is<\/a>.<\/p>\n

How does DNSSEC work?<\/h2>\n
    \n
  1. Your DNS provider signs your records:<\/b> Every record (A, MX and others) gets a digital signature with your domain\u2019s key.<\/li>\n
  2. A DS record is registered at the registrar:<\/b> It links your domain\u2019s key to the chain of trust that starts at the DNS root.<\/li>\n
  3. The resolver checks the signature:<\/b> When a visitor looks up your site, their DNS resolver verifies the signature.<\/li>\n
  4. Forged answers are rejected:<\/b> If the signature does not match, the fake address is not returned.<\/li>\n<\/ol>\n

    Does your domain need it?<\/h2>\n
    \n\n\n\n\n\n\n\n\n
    Type of site<\/th>\nPriority<\/th>\n<\/tr>\n<\/thead>\n
    Banks, financial and government bodies<\/td>\nHigh<\/td>\n<\/tr>\n
    Online stores and payment portals<\/td>\nHigh<\/td>\n<\/tr>\n
    Company sites that collect customer data<\/td>\nMedium<\/td>\n<\/tr>\n
    A blog or simple brochure site<\/td>\nOptional<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

    Before enabling: watch these points<\/h2>\n