Tiếng Việt
English
简体中文
ALIBABA CLOUD PARTNER
WHAT IS DNSSEC?
DNSSEC (Domain Name System Security Extensions) is a set of security features designed to enhance the security of the DNS (Domain Name System) system. When deployed, DNSSEC ensures that the information returned from the DNS system is accurate and not changed during transmission.
Simply put, if you enable DNSSEC for your website, when customers access your website, they will be taken to the correct server of that website, not a fake server.
BENEFITS OF DNSSEC
DNSSEC helps protect the DNS system from attacks, ensuring users access the correct website. The main benefits are as follows:
- Prevent DNS spoofing: Protect users from phishing websites and DNS spoofing attacks.
- Enhance website security: Make connections more secure and reliable.
- Prevent Cache Poisoning: Protect DNS cache from fake data.
DNSSEC Price List
DNSSEC
0.09
USD/Month
-
Applies to international domain names -
Extended security for the DNS system
-
Use secure, reliable domain names
Applies to international domain names
Additional services
| Service | Price (10% VAT included) | Register |
|---|---|---|
| REGISTRY LOCK FOR VIETNAMESE DOMAIN NAME Prevent unauthorized domain name hijacking | 16.5 USD/Year | Register |
| WHOIS PROTECTION FOR INTERNATIONAL DOMAIN NAMES Protect domain name privacy | 4.95 USD/Year | Register |
Features of DNSSEC
Sender authentication
Confirm the validity of data when sent
Data integrity
Ensure that data is not changed during transmission, helping the recipient know that the data is intact.
Repudiation of existence
Prevent attackers by automatically sending a confirmation message that the data requested by the user does not exist.
FAQ about DNSSEC
1. How does DNSSEC work?
This feature uses digital signatures for authentication:
When a user sends a request to access a domain name, the system will check the authenticity of the DNS information using a pair of encryption keys (public and private keys).
If the DNS information has been changed or tampered with, the system will refuse the connection, protecting the user from accessing untrusted websites.
2. Why use DNSSEC?
Domain Name System Security Extensions (DNSSEC) helps protect the DNS system from spoofing attacks and improve website security by authenticating DNS data through digital signatures. This feature prevents DNS information from being changed during transmission, ensuring that users access the correct website and avoid attacks. In addition, DNSSEC also enhances the reliability of the website, helping to improve overall reputation and security, while complying with international security standards.
3. How does DNSSEC protect users?
This feature protects users by preventing DNS spoofing or cache poisoning attacks, in which hackers modify DNS data to redirect users to fake or malicious websites. When the service is deployed, it uses digital signatures to validate the integrity of DNS records, ensuring that the IP address information of websites is correct and has not been altered. This ensures that users will access the correct website without being scammed or redirected to malicious websites.
4. Does DNSSEC increase the number of domain name queries?
Yes, this feature can increase the number of domain name queries. This happens because it requires additional authentication steps to check the digital signature and verify the integrity of DNS data. When a user accesses a domain with DNSSEC enabled, the DNS system must perform additional queries to validate the digital signature, thus generating more queries than a domain without it. However, this increase is usually insignificant and provides greater security for users.
5. Does DNSSEC affect domain query speed?
Yes, this feature may affect the domain query speed slightly. Because the system requires digital signature verification and integrity check of DNS records, this process will take more time. However, for systems with cache, this feature only affects the first query process, and subsequent queries (when information has not been deleted from the cache) will not be affected because the information has been retrieved from the cache.
6. How to check if a domain name has DNSSEC enabled?
You can use VinaHost’s checker tool at the top of the page. Just enter the domain name and click Check for detailed information.
7. How to deploy DNSSEC security for domain names?
First, you check whether the domain name has been activated DNSSEC or not. If not, you can contact VinaHost for advice. The deployment process will be supported by our technical team.
Phone: 1900 6046 ext. 1
Email: cskh@vinahost.vn
Livechat: https://livechat.vinahost.vn/chat.php
8. Do users need to install any additional software to use DNSSEC?
For normal users, there is no need to install any additional software to use this feature. DNS services and servers will automatically handle the authentication. However, you can install an additional plugin or browser extension to display an icon or notification when a domain name has been protected.
