মডিউল পাঠ (2/4)
Spoofing e cache poisoning
Spoofing and cache poisoning
Cache poisoning means causing a recursive resolver to store false DNS data and return it to later clients. A forged response may try to arrive before the legitimate one and guess the query details. Modern resolvers use unpredictable source ports and query identifiers, response matching, bailiwick checks, and other safeguards to make this harder.
DNSSEC provides cryptographic validation for signed data and can detect forged or altered answers when the chain validates. It does not encrypt queries or protect unsigned data. Keep resolver software current, restrict who can use recursion, and monitor unusual responses. Do not attempt poisoning against real systems; use an isolated lab.
Check your understanding
Choose the best answer. This quiz runs locally and sends no DNS queries to real domains.
Which protection cryptographically checks data in a signed zone?