The domain name system (DNS) security extensions (DNSSEC) define an Internet standard for authenticating and validating the integrity of DNS data communicated between DNS resolvers and authoritative servers. DNSSEC is the only definitive preventative measure for cache poisoning attacks such as man-in-the-middle or the Kaminsky attack. But validating DNS data only works when authoritative server administrators sign their data in accordance with DNSSEC standards. We’ll provide an overview of DNSSEC, what it does and doesn’t do, the administrative requirements to maintain signatures and methods to more simply DNSSEC implementation.