Tag: DNSSEC

Networking

DNS Deep Dive: How a Name Becomes an IP

Networking from Scratch (lesson 8) — the DNS hierarchy from root to authoritative, the recursive resolver path, TTL propagation, the records you will actually edit (A, AAAA, CNAME, MX, TXT, SRV), DNSSEC and DoH/DoT in plain English, and the dig and nslookup commands that turn DNS into something you can debug.

Systems Admin

Implement Domain Name System Security Extension (DNSSEC)

Learn how to implement DNSSEC on Windows Server to protect against man-in-the-middle DNS attacks. This step-by-step guide covers the Zone Signing Wizard, configuring Key Signing Keys (KSK) and Zone Signing Keys (ZSK) with RSA-SHA-256, enabling NSEC3 and Trust Anchor distribution, verifying the padlock icon, and best practices for key rotation and monitoring.