What Is DNSSEC and How Does it Work?

rigister now! 
The scams, swindles, ruses and rip-offs infesting the Internet can make navigating the Web a minefield for those who aren’t careful. If you’re conducting business on the Web, this means that you must do everything in your power to protect yourself and your customers from harmful attacks. One of the means of doing this called DNSSEC, which is short for “Domain Name System Security Extensions.” But what, exactly, is DNSSEC, and how does it work? Here’s a primer:
DNSSEC, which is available from domain registrars like GoDaddy.com, addresses an identified security risk and helps prevent malicious activities like cache poisoning, pharming, and man-in-the-middle attacks. It uses a digital signature to create a chain of authority. Then, it uses the chain to verify that the source domain name, which the DNS resolver returns, matches the DNS record stored at the authoritative DNS. If it cannot validate the source, it discards the response. Thus, DNSSEC’s digital signature ensures that you’re communicating with the site or Internet location you intended to visit and not a bogus site trying to steal your identity or infect your computer.
Specifically, DNSSEC is a set of extensions to DNS that provides:

•     Origin authentication of DNS data
•     Data integrity
•     Authenticated denial of existence

At GoDadddy.com, they are currently offering two types of DNSSEC: self-managed and fully managed. Here are the criteria for each type:
 To use self-managed DNSSEC services:
Your domain name must be registered through Go Daddy.
The domain name’s registry must be DNSSEC-aware, and Go Daddy must support it for the domain name’s extension:
.com
.net
.biz
.us
.org
.eu
.co.uk, .me.uk, and .org.uk
.co, .com.co, .net.co, and .nom.co
The domain name must use custom name servers. That is, it is not hosted, parked, or forwarding with Go Daddy
The domain name must be in active status, not flagged by the registry, and have valid Whois data.
To use fully managed DNSSEC services:
You must have a Go Daddy Premium DNS account.
The domain name’s registry must be DNSSEC-aware, and Go Daddy must support it for the domain name’s extension:

•         .com
•         .net
•         .biz
•         .us
•         .org
•         .eu
•         .co.uk, .me.uk, and .org.uk
•         .co, .com.co, .net.co, and .nom.co

The domain name must use Go Daddy’s name servers.