Knowledge Base

Does DNSSEC Provide Confidentiality?

No. DNSSEC provides authentication and data integrity, not confidentiality.

DNSSEC enables resolvers to verify that DNS information is authentic and has not been modified in transit. However, DNS and DNSSEC do not encrypt DNS data or restrict who can query it. Any host can submit a DNS query and receive the same response.

Since access control and confidentiality are not part of DNS or DNSSEC, sensitive or private information should not be stored in DNS records.

Was this article helpful?