---
type: concept
title: DNSSEC Validation
tags: [dns, security, validation]
related: [dnssec, local-dns-resolver, authoritative-nameserver]
created: 2026-07-01
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_support_dokumentation_anleitungen_dnssec.md"]
---

# DNSSEC Validation

**DNSSEC Validation** is the process by which a DNS client verifies the digital signatures attached to DNS records. This process ensures the integrity and authenticity of the DNS data, preventing attacks such as DNS spoofing or cache poisoning.

## Technical Requirements
For validation to occur, the client cannot simply rely on the response from an [[authoritative-nameserver]]. Instead, a **Local DNS Resolver** must be configured on the client system. The local resolver performs the cryptographic verification of the signatures before passing the result to the operating system or application.

## Use Cases
DNSSEC validation is specifically required for:
- Verifying **SSH fingerprints** via DNS.
- Ensuring the authenticity of DNS-based security records.

## Platform Availability
The [[universitatsrechenzentrum-urz]] provides specific implementation instructions for:
- **Linux**: Utilizing local resolvers for validation.
- **macOS**: Utilizing local resolvers for validation.

Currently, there is a documentation gap regarding the specific implementation of DNSSEC validation for **Windows** clients.