#DNSSEC

DNSSEC: what it protects, what it doesn't and how to enable it for a .pl domain

On Friday an administrator moves the company domain's zone to a new DNS operator, and on Monday some customers cannot open the website. The culprit is a DS record that still points to the old key. DNSSEC confirms where DNS answers come from, but it does not encrypt them and will not protect a domain whose registrar account has been taken over.