US Government Promotes Digital Signing on DNS Root Zone

US Government Promotes Digital Signing on DNS Root Zone

The American government is now moving to take on a digital signing process on the records in the DNS root zone. This is to lessen the addressing system's vulnerability from breaches.


The idea is to cryptographically sign the DNS root zone with DNSSEC or Domain Name and Addressing System Security Extensions. The DNSSEC are a suite of IETF specifications for securing certain kinds of information provided by the Domain Name System (DNS) as deployed on Internet Protocol (IP) networks.



Various security issues have arise involving DNS, and the use of DNSSEC seems to be a viable way of trimming down such cases. Instigating DNSSEC is also one way of presenting novel steps in how alterations to the root zone are issued.



A DNS root zone is the top level of the DNS hierarchy for a given DNS system adopted on the Web. This particular DNS is the world's largest deployment of DNS to date.