DNS 101 Miniseries - #5 - Why do we need DNSSEC

DNSSEC strengthens authentication in DNS using digital signatures based on public key cryptography. With DNSSEC, it's not DNS queries and responses themselves that are cryptographically signed, but rather DNS data itself is signed by the owner of the data.
This video steps through what benefits DNSSEC provides and one of the common attacks which can be conducted against DNS.
▶Hashing: • Hashing - what it is, ...
▶Digital Signatures: • Digital Signatures - D...
▶ Check out my full range of content at learn.cantrill.io
▶ Join the best online technical study community techstudyslack...
FOLLOW ME 😺
▶ Twitter: / adriancantrill
▶ TH-cam: / learncantrill
OTHER VIDEOS AND PLAYLISTS 🎞
▶ Network Fundamentals • Networking Fundamentals
▶ Technical Fundamentals • Technical Fundamentals
▶ AWS Fundamentals • AWS Fundamentals
▶ Course Intros • learn.cantrill.io - Co...
▶ Exam Question Practice • AWS Exam Question Walk...
▶ MINI PROJECT - Hybrid DNS • Mini Project - Hybrid ...
▶ MINI PROJECT - Advanced VPN • Mini-project - Advance...
▶ MINI PROJECT - Pet Cuddle O Tron • Mini-project - Pet-Cud...
▶ MINI PROJECT - Web Identity Federation • Mini-project - Simple ...
▶ MINI PROJECT - Architecture Evolution • Mini-project - Applica...
▶ MINI PROJECT - Cat Pipeline • Mini Project - CatPipe...
▶ Best Videos • Best Videos
All rights reserved © 2022 Adrian Cantrill

[@rameeskr]

This channel is a gem and I hate youtube algorithm for delaying me finding this.

[@LearnCantrill]

thanks :) help me spread the word.

[@MorbidPasta]

I think youtube fixed their algorithm this summer, because now I'm starting to find jewel channels like this. Awesome stuff

[@LearnCantrill]

Please share it around on social media. It really helps.

[@TheBettinaNYC]

I’ve been following these videos for 3 days and this is the easiest I’ve learned in 10 years as a tech engineer and I work for Microsoft

[@LearnCantrill]

Thanks Bettina I really appreciate the feedback. Feel free to share these videos around - they’re my way of giving back so I want them in front of all the people ;)

[@billclintonj]

I have watched several videos about DNSSEC but nothing gave crystal clear explanations as this one. I like the graphics used as well.
Thank you very much for your effort! 💚

[@samadbouss8842]

Clearly the best tutorial on the cloud. Very well structured and explained. Give this m’en the Oscar

[@hayahamdan-d6r]

Thank You for your videos .

[@yurkko]

Thanks for clear explanation! And graphics are very helpful

[@LearnCantrill]

Glad it was helpful!

[@thkhan]

I love bullet points.I wish you will start to love this also.

[@LearnCantrill]

lol... they have their place :)

[@marius-mihailionte339]

thank you

[@LearnCantrill]

You're welcome

[@0.Payang]

#gov 1billion debt for etsi-iso, internal affair by google, inc permissive law.

[@datvuong7420]

why does DNS resolver easily except the result from the person who is not pointed by the root sever? at 6:00

[@void.walker.]

(I know it's late, but in case if anyone's wondering) The short answer is that DNS messages are sent through UDP, which is a stateless protocol and the source IP-address is blindly trusted. So if a bad guy has an access to a query traffic, he can spam fake UDP responses pretending to be the authoritative server.
It's called DNS cache poisoning, though it is difficult to implement but it's possible.