---
type: concept
title: Local DNS Resolver
tags: [dns, networking, software]
related: [dnssec-validation, dnssec]
created: 2026-07-01
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_support_dokumentation_anleitungen_dnssec.md"]
---

# Local DNS Resolver

A **Local DNS Resolver** is a software component running on a client system that manages DNS queries. While many operating systems use them for DNS optimization (caching), they are critical for implementing security extensions.

## Role in DNSSEC
In the context of [[dnssec]], the local resolver acts as the validating entity. Because [[authoritative-nameserver]]s do not provide validated responses directly to the end-client, the local resolver:
1. Queries the DNS hierarchy.
2. Retrieves the digital signatures.
3. Validates the signatures against trusted keys.
4. Returns a verified response to the application.

This architecture allows users at the Universität Greifswald to enable DNSSEC validation on their own devices regardless of the default network settings.