DNS Security Introduction and Requirements, RFC 4033
R Arends, R Austein, M Larson, Daniel Massey, Scott W. Rose
The Domain Name System Security Extensions (DNSSEC) add data origin authentication and data integrity to the Domain Name System. This document introduces these extensions and describes their capabilities and limitations. This document also discusses the services that the DNS security extensions do and do not provide. Last, this document describes the interrelationships between the documents that collectively describe DNSSEC.