Our Blog

DNSSEC Validation Now Possible On Google Public DNS

You Are Here :
Our Blog

DNSSEC Validation Now Possible On Google Public DNS

After launching the Google Public DNS three years ago speed up and secure the internet, Google has announced a big step that will help in achieving its security goals. Google now allows DNSSEC or Domain Name System Security Extensions validation on their Google Public DNS resolvers. Earlier Google did not perform validation and instead passed on DNSSEC messages. With the new system in place Google will be able to protect users from DNS based attacks. It will also be able to identify and reject invalid and suspect responses from DNSSEC protected domains.

What does this mean? What is DNS role?

DNS is responsible in translating human readable domain names into IP addresses so that computers can read then and access them. This system, although critical, was not secure, and considerable portion of attacks targeted the name resolution process and thus directing users to malicious websites by returning malicious website IP addresses for genuine DNS queries.

DNS cache poisoning was the most common type of attack which came about by polluting cache of DNS resolvers. To thwart such types of attacks resolvers have to verify and authenticate the response.

How does DNSSEC help?

DNSSEC uses public key cryptography and digital signatures to verify authenticity of DNS responses. DNS zones maintain public and private key pairs. For each DNS record a specific digital signature is created and encrypted by using the private key. As for the corresponding public key, it is tested for genuineness via a series/chain of trust keys of higher level zones. Thus response tampering is taken care of as it is difficult to forge signatures (digital) without access to private keys. Responses with incorrect digital signatures get rejected automatically.

This is one giant leap in securing the internet. By confirming data integrity and data origin the DNSSEC works in tandem with other security mechanisms like SSL. The same infrastructure can also be used in case of email and other internet applications.

As of now over 130 billion DNS queries are served by the Google Public DNS. At times this volume goes up to 150 billion queries from more than 70 million IP addresses daily. Having said this it is worth noting that only 7 percent client side queries are DNSSEC enabled, of which only 3 percent request confirmation/validation and only 4 percent DNSSEC data without confirmation/validation. From the name server side only 1 percent DNS queries are signed. This clearly shows that there is a long way to go.

For DNSSEC to be effective action from both Authoritative name servers and DNS resolvers is necessary. DNS resolvers of ISPs and other public resolvers have to start confirming DNS responses and domain owners need to sign their domains. Only a third of all top domains are signed as of now. Second level domains still remain unsigned. Google on its part is asking all parties to deploy DNSSEC to protect end users.

Why Choose Anuva?

Anuva is a leading Digital Marketing Company providing results-driven Internet Marketing Services including Local SEO Services, Online Reputation Management Services, WordPress SEO, Ecommerce SEO, Professional SEO Services, SEO Consulting Services, SEO Audit Services, etc. to clients worldwide. Looking for Google Ads Services OR Facebook Ads Agency? We are a highly experienced PPC Management Company specialized in eCommerce PPC Management. Please check our Client Testimonials and SEO Rankings for you to see the outstanding results we have achieved. Contact us to generate a Huge ROI on your invested dollars from our strongest Online Marketing Services.

We Are Qualified
SEO Ranking
digital marketing automation platform alberta 8
marketing automation softwares alberta 8
marketing automation webcasting alberta 1
marketing automation webcasts alberta 9
online agency marketing automation platform 9
google.com Ranking As Of 26-Aug-2023
ares p2p file sharing program 1
ares p2p network 1
official ares download 3
p2p file sharing platform ares 1
revolutionary p2p file sharing system 3
google.com Ranking As Of 26-Aug-2023
biyani digital language lab 1
biyani digital language laboratory 1
biyani digital language labs 1
biyani digital languages lab 1
biyani sugar factory software 7
google.co.in Ranking As Of 26-Aug-2023
csr data 2
csr ratings comparision 1
search sustainability rating 1
search sustainability ratings 3
social responsibility and sustainability ratings 1
google.com Ranking As Of 26-Aug-2023
emenu international 1
emenu solutions 6
interactive emenu 1
international e-menu 1
international interactive emenu 1
google.com Ranking As Of 26-Aug-2023
download topor pcb 1
pcb design time reduction 1
topological router for pcb 1
topological router for printed circuit boards 1
topor competitive advantages 1
google.com Ranking As Of 26-Aug-2023
firewall mail server 1
ldap base dn 2
reporting mta 2
spamstopshere 2
zimbra greenview data 1
google.com Ranking As Of 26-Aug-2023
real-time breach detection in somerset 7
real-time breach detection in somerset nj 9
real-time breach detection somerset 3
real-time breach detection somerset nj 8
somerset real-time breach detection 7
google.com Ranking As Of 26-Aug-2023
buy install monitor software 1
buy install monitor softwares 1
buy program installation monitor 3
buy program installation monitor tool 2
software installation monitor tool 3
google.com Ranking As Of 26-Aug-2023
oracle call center software service 5
oracle call center software services 8
oracle predictive dialer call center solution 1
oracle preview dialing software 1
predictive dialer software oracle 1
google.com Ranking As Of 26-Aug-2023
railcar repair management 2
railcar repair management software 4
railcar repair management softwares 3
railcar service software 8
railcar software 9
google.com Ranking As Of 26-Aug-2023
crystal ssrs reports scheduling tool 1
schedule crystal ssrs report 2
schedule crystal ssrs reports 1
ssrs crystal reports scheduler tool 1
ssrs report scheduler software 2
google.com Ranking As Of 26-Aug-2023
You have all done a wonderful job making both of my websites look more modern and professional. I would also like to say how excellent your customer support has been. Any and all concerns I had were addresses immediately with no questions asked....
- Beau Mason
We are more than satisfied with Anuva's Search Engine Optimization services. They have developed and upgraded our website and promoted the business very efficiently. Kudos! Keep it up! We have emerged as a reputed large scale organization and...
- Richard, Seattle
Why Us?
  • 70% + Cost Savings
  • IP Protection & Confidentiality
  • Expert Team with Global Delivery Experience
  • Business and Domain Expertise
  • Maintain your Competetive Edge

Call Me Back

    Success! Thanks for Your Request.
    Error! Please Try Again.