I am using a web browser to access DNSSec enabled sites. My current name server doesn't (won't) support DNSSec for at least a year. What are my alternatives?

Do any ISPs currently offer DNSSec? Any other viable secure companies?

  • 1
    For querying on your end or for providing responses to people looking up your domain?
    – Jeff Ferland
    Commented Oct 4, 2011 at 17:17
  • @JeffFerland This is for querying on my end. Commented Oct 4, 2011 at 17:34

1 Answer 1


You may have to clarify what it is you mean when you say that your current nameserver doesn't support DNSSEC when you're speaking from the resolver perspective. You see, any nameserver (that will do recursive queries for you) will cache and forward any record set your request. That includes RRSIG records which are the foundation of DNSSEC.




You can run a DNS resolver on your own machine that rejects invalid DNSSEC records. It is the local resolver's job by default, however. No special configuration is needed for nameservers to support this.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .