Statements (88)
| Predicate | Object |
|---|---|
| gptkbp:instance_of |
gptkb:IEEE_802.3
|
| gptkbp:can_be_used_with |
gptkb:DNS_over_TLS
gptkb:DNS_over_HTTPS |
| gptkbp:dependency |
gptkb:crypt
|
| gptkbp:developed_by |
gptkb:Internet_Engineering_Task_Force
|
| gptkbp:enhances |
DNS security
security of the Domain Name System |
| gptkbp:first_published |
gptkb:RFC_4033
|
| https://www.w3.org/2000/01/rdf-schema#label |
DNSSEC
|
| gptkbp:includes |
DS records
NSEC records RRSIG records key signing keys zone signing keys |
| gptkbp:introduced_in |
gptkb:2005
|
| gptkbp:is |
a replacement for DNS
|
| gptkbp:is_adopted_by |
gptkb:educational_institutions
gptkb:financial_institutions government agencies non-profit organizations large enterprises telecommunications companies |
| gptkbp:is_challenged_by |
performance issues
key management issues lack of awareness complexity of implementation legacy systems compatibility cost of deployment performance concerns key management difficulties |
| gptkbp:is_compatible_with |
some legacy systems
|
| gptkbp:is_evaluated_by |
risk management frameworks
security assessments security audits penetration testing |
| gptkbp:is_implemented_in |
gptkb:Unbound
gptkb:Knot_DNS gptkb:Power_DNS gptkb:BIND domain name registrars |
| gptkbp:is_part_of |
gptkb:Digital_Domain
cybersecurity measures DNS protocol suite internet governance network security protocols Internet security framework |
| gptkbp:is_promoted_by |
gptkb:DNSSEC_Alliance
gptkb:Cybersecurity_and_Infrastructure_Security_Agency gptkb:Internet_services DNSSEC Deployment Initiative |
| gptkbp:is_related_to |
gptkb:RFC_4035
gptkb:RFC_4034 gptkb:RFC_5155 gptkb:TLS/_SSL gptkb:RFC_8624 gptkb:PKI PKI (Public Key Infrastructure) RFC 6781 RFC 8145 CDNSKEY records CDS records DNSKEY record DNSSEC Lookaside Validation (DLV) DNSSEC Trust Anchor key signing key (KSK) zone signing key (ZSK) NSEC3 records |
| gptkbp:is_supported_by |
gptkb:ICANN
gptkb:IANA major web browsers most modern DNS servers various DNS software vendors |
| gptkbp:is_tested_for |
gptkb:DNSSEC_Debugger
gptkb:Verisign_Labs |
| gptkbp:is_used_in |
secure DNS transactions
secure email systems |
| gptkbp:prevention |
DNS spoofing
|
| gptkbp:provides |
authentication of DNS responses
|
| gptkbp:purpose |
to protect the integrity of DNS data
|
| gptkbp:related_to |
gptkb:DNS
|
| gptkbp:requires |
public key infrastructure
top-level domains DNS resolver support |
| gptkbp:supports |
zone signing
|
| gptkbp:uses |
digital signatures
|
| gptkbp:bfsParent |
gptkb:ICANN
gptkb:Digital_Domain |
| gptkbp:bfsLayer |
4
|