What does DNSSEC provide to applications? DNS answer with verifiably signed RR set(s) is known to be identical to what zone intended. Widely deployed DNSSEC allows application to place more important data in DNS unsigned keying info IPSECKEY, SSHFP spoof proof service location other... |