Domain and contact search

DNSSEC

Read our latest reportage about DNSSEC.

What is DNSSEC?

DNS Security Extensions (DNSSEC) is a more secure way of doing look-ups of Internet addresses for e.g. the web and e-mail. In contrast to the usual domain name system (DNS), look-ups with DNSSEC are signed cryptographically, which makes it possible to ensure that they come from the right sender and that the content has not been altered during transmission. .SE-DNSSEC is a supplemental service to .SE’s domain name service. The objective of the service is for the domain name registrant to be able to secure his/her domains with DNSSEC.

• Download a broschure about DNSSEC

Prevents attacks on DNS requests

For the layman, this means a reduced risk of being fooled when e.g. making banking transactions or shopping on the Net, because it becomes easier for the user to confirm that he/she is really communicating with the right bank or shop rather than with an impostor.

However, it is important to note that DNSSEC does not stop all kinds of fraud. It is only designed to prevent attacks where the attacker manipulates responses to DNS requests to achieve his/her goal.

A supplemental service

.SE-DNSSEC is a supplemental service to .SE’s domain name service. The objective of the service is for the domain name registrant to be able to secure his/her domains with DNSSEC.

The service consists of .SE providing the customers with the possibility of administrating and publishing their DNSSEC keys in the .SE zone, while .SE verifies them in accordance with .SE’s policy for its handling of DNSSEC, . Just like .SE’s regular domain name service, the domain name registrant, or a party engaged by the registrant, is required to administer his/her own domain. With DNSSEC, the customer’s work is expanded to also include administering his/her DNSSEC keys and signing his/her own DNS data with them.

For popular websites

A target group for .SE-DNSSEC is all of those who operate popular websites and wherever there may be a commercial or ideological interest for an attacker to reroute the visitors to the attacker’s own website. For this category of users, .SE-DNSSEC is an important part of the puzzle in the work to offer visitors a safe and secure Internet environment.

Conditions and preparations

A domain name holder have to have a .SE registrar and DNS operator providing DNSSEC in order to get started with DNSSEC. Thus the holder must contact his .SE registrar and DNS operator to find out if any they are supporting DNSSEC.

Contacts for .SE-DNSSEC

If you have further questions regarding .SE-DNSSEC, please contact: Patrik Wallström, Project Manager DNSSEC, Phone: +46-8-452 35 00, e-mail: patrik.wallstrom@iis.se