In this Feature of the Month video, Kevin Mosley, BlueCat’s Director of Customer Care, demonstrates how Domain Name System Security Extensions (DNSSEC) protect your external DNS by validating the authenticity and integrity of DNS responses.

What you’ll learn:

- What DNSSEC is and how it uses cryptographic signatures to prevent spoofing

- How to configure DNSSEC policies in BlueCat Integrity - How to sign DNS zones and deploy them securely

- How to validate DNSSEC using tools like dnsviz and DS record validation at your registrar

Through a hands-on demo, you'll see how DNSSEC ensures end-to-end trust across the DNS resolution chain—from root to TLD to your signed domain. You’ll also learn how to generate and submit DS records to your registrar to complete the authentication chain.