Root zone signed for DNSSEC

DNSSEC, a set of security extensions that provide authentication of DNS data and prevent against attacks such as cache poisoning, has been enabled at the root zone — a major step toward widespread adoption of the technology, VeriSign has announced. DNSSEC uses digital, cryptographic signatures to protect against forged DNS data and ensures that the server to which a user believes they are connecting is the correct one.The root zone, comprised of 13 root servers, is the top zone on the DNS hierarchy and lists the names and IP addresses of the authoritative DNS servers for all top-level domains, such as .com, .org and .gov. — DK