DNSSEC Isn't What You Think...
Most people think DNSSEC means DNS security. Well... not really in the full sense. It is designed to protect from cache poisoning, but does not encrypt DNS the way many think it does.
We go under the hood with a live Wireshark packet capture to see how DNSSEC behaves on the wire. You’ll see what it protects, what it doesn’t, and why the word “secure” can be misleading if you take it at face value.
What you’ll learn:
How DNSSEC adds validation to DNS responses
What a signed DNS response looks like in Wireshark
Where DNSSEC doesn’t provide security
Download the pcap and follow along.
https://github.com/packetpioneer/youtube/blob/main/dns-dnssec-cloudflare.pcapng
? Want to go deeper? Get $50 off my Wireshark Certified Analyst course here:
https://packetschool.teachable.com/l/pdp/official-wireshark-certified-analyst?coupon_code=PACKETHEAD50
We go under the hood with a live Wireshark packet capture to see how DNSSEC behaves on the wire. You’ll see what it protects, what it doesn’t, and why the word “secure” can be misleading if you take it at face value.
What you’ll learn:
How DNSSEC adds validation to DNS responses
What a signed DNS response looks like in Wireshark
Where DNSSEC doesn’t provide security
Download the pcap and follow along.
https://github.com/packetpioneer/youtube/blob/main/dns-dnssec-cloudflare.pcapng
? Want to go deeper? Get $50 off my Wireshark Certified Analyst course here:
https://packetschool.teachable.com/l/pdp/official-wireshark-certified-analyst?coupon_code=PACKETHEAD50
Chris Greer
Wireshark can be intimidating. Let's change that.
This channel is about analyzing protocols with Wireshark and other packet shredding tools. These skills are critical for network troubleshooting, Cybersecurity, and all IT roles.
For business inquiries...