← All projects
Signed-zone extensions for DNS. Provides cryptographic authenticity (not confidentiality) for DNS responses. Slow adoption but powers DANE, RPKI bridges, and modern DNS-based identity hacks.