Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using a web browser to access DNSSec enabled sites. My current name server doesn't (won't) support DNSSec for at least a year. What are my alternatives?

Do any ISPs currently offer DNSSec? Any other viable secure companies?

share|improve this question
For querying on your end or for providing responses to people looking up your domain? – Jeff Ferland Oct 4 '11 at 17:17
@JeffFerland This is for querying on my end. – LamonteCristo Oct 4 '11 at 17:34
up vote 4 down vote accepted

You may have to clarify what it is you mean when you say that your current nameserver doesn't support DNSSEC when you're speaking from the resolver perspective. You see, any nameserver (that will do recursive queries for you) will cache and forward any record set your request. That includes RRSIG records which are the foundation of DNSSEC.


You can run a DNS resolver on your own machine that rejects invalid DNSSEC records. It is the local resolver's job by default, however. No special configuration is needed for nameservers to support this.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.