When DNSSEC goes wrong: how we responded to the .de TLD outage
… Unlike encrypted DNS protocols, such as DNS over TLS DoT and DNS over HTTPs DoH , DNSSEC is about integrity, not privacy. The records are visible, but their authenticity can be proven. What makes DNSSEC unique is that the signatures travel together with the records they protect. …