| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600 |
- {
- "title":"DNSSEC and DANE",
- "description":"Method of validating a DNS response against a trusted root server. Mitigates various attacks that could reroute a user to a fake site while showing the real URL for the original site.",
- "spec":"https://tools.ietf.org/html/rfc4033",
- "status":"other",
- "links":[
- {
- "url":"https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions",
- "title":"Wikipedia - DNSSEC"
- },
- {
- "url":"https://bugs.chromium.org/p/chromium/issues/detail?id=50874",
- "title":"Chrome implementation bug"
- },
- {
- "url":"https://bugzilla.mozilla.org/show_bug.cgi?id=672600",
- "title":"Firefox implementation bug"
- }
- ],
- "bugs":[
-
- ],
- "categories":[
- "Security"
- ],
- "stats":{
- "ie":{
- "5.5":"a #1",
- "6":"a #1",
- "7":"a #1",
- "8":"a #1",
- "9":"a #1",
- "10":"a #1",
- "11":"a #1"
- },
- "edge":{
- "12":"a #1",
- "13":"a #1",
- "14":"a #1",
- "15":"a #1",
- "16":"a #1",
- "17":"a #1",
- "18":"a #1",
- "79":"a #1",
- "80":"a #1",
- "81":"a #1",
- "83":"a #1",
- "84":"a #1",
- "85":"a #1",
- "86":"a #1",
- "87":"a #1",
- "88":"a #1",
- "89":"a #1",
- "90":"a #1",
- "91":"a #1",
- "92":"a #1",
- "93":"a #1",
- "94":"a #1",
- "95":"a #1",
- "96":"a #1",
- "97":"a #1",
- "98":"a #1",
- "99":"a #1",
- "100":"a #1",
- "101":"a #1",
- "102":"a #1",
- "103":"a #1",
- "104":"a #1",
- "105":"a #1",
- "106":"a #1",
- "107":"a #1",
- "108":"a #1",
- "109":"a #1",
- "110":"a #1",
- "111":"a #1",
- "112":"a #1",
- "113":"a #1",
- "114":"a #1",
- "115":"a #1",
- "116":"a #1",
- "117":"a #1",
- "118":"a #1",
- "119":"a #1",
- "120":"a #1"
- },
- "firefox":{
- "2":"a #1",
- "3":"a #1",
- "3.5":"a #1",
- "3.6":"a #1",
- "4":"a #1",
- "5":"a #1",
- "6":"a #1",
- "7":"a #1",
- "8":"a #1",
- "9":"a #1",
- "10":"a #1",
- "11":"a #1",
- "12":"a #1",
- "13":"a #1",
- "14":"a #1",
- "15":"a #1",
- "16":"a #1",
- "17":"a #1",
- "18":"a #1",
- "19":"a #1",
- "20":"a #1",
- "21":"a #1",
- "22":"a #1",
- "23":"a #1",
- "24":"a #1",
- "25":"a #1",
- "26":"a #1",
- "27":"a #1",
- "28":"a #1",
- "29":"a #1",
- "30":"a #1",
- "31":"a #1",
- "32":"a #1",
- "33":"a #1",
- "34":"a #1",
- "35":"a #1",
- "36":"a #1",
- "37":"a #1",
- "38":"a #1",
- "39":"a #1",
- "40":"a #1",
- "41":"a #1",
- "42":"a #1",
- "43":"a #1",
- "44":"a #1",
- "45":"a #1",
- "46":"a #1",
- "47":"a #1",
- "48":"a #1",
- "49":"a #1",
- "50":"a #1",
- "51":"a #1",
- "52":"a #1",
- "53":"a #1",
- "54":"a #1",
- "55":"a #1",
- "56":"a #1",
- "57":"a #1",
- "58":"a #1",
- "59":"a #1",
- "60":"a #1",
- "61":"a #1",
- "62":"a #1",
- "63":"a #1",
- "64":"a #1",
- "65":"a #1",
- "66":"a #1",
- "67":"a #1",
- "68":"a #1",
- "69":"a #1",
- "70":"a #1",
- "71":"a #1",
- "72":"a #1",
- "73":"a #1",
- "74":"a #1",
- "75":"a #1",
- "76":"a #1",
- "77":"a #1",
- "78":"a #1",
- "79":"a #1",
- "80":"a #1",
- "81":"a #1",
- "82":"a #1",
- "83":"a #1",
- "84":"a #1",
- "85":"a #1",
- "86":"a #1",
- "87":"a #1",
- "88":"a #1",
- "89":"a #1",
- "90":"a #1",
- "91":"a #1",
- "92":"a #1",
- "93":"a #1",
- "94":"a #1",
- "95":"a #1",
- "96":"a #1",
- "97":"a #1",
- "98":"a #1",
- "99":"a #1",
- "100":"a #1",
- "101":"a #1",
- "102":"a #1",
- "103":"a #1",
- "104":"a #1",
- "105":"a #1",
- "106":"a #1",
- "107":"a #1",
- "108":"a #1",
- "109":"a #1",
- "110":"a #1",
- "111":"a #1",
- "112":"a #1",
- "113":"a #1",
- "114":"a #1",
- "115":"a #1",
- "116":"a #1",
- "117":"a #1",
- "118":"a #1",
- "119":"a #1",
- "120":"a #1",
- "121":"a #1",
- "122":"a #1",
- "123":"a #1"
- },
- "chrome":{
- "4":"a #1",
- "5":"a #1",
- "6":"a #1 #2",
- "7":"a #1 #2",
- "8":"a #1 #2",
- "9":"a #1 #2",
- "10":"a #1 #2",
- "11":"a #1 #2",
- "12":"a #1 #2",
- "13":"a #1 #2",
- "14":"a #1 #2",
- "15":"a #1 #2",
- "16":"a #1 #2",
- "17":"a #1 #2",
- "18":"a #1 #2",
- "19":"a #1 #2",
- "20":"a #1 #2",
- "21":"a #1 #2",
- "22":"a #1 #2",
- "23":"a #1 #2",
- "24":"a #1 #2",
- "25":"a #1 #2",
- "26":"a #1 #2",
- "27":"a #1 #2",
- "28":"a #1 #2",
- "29":"a #1 #2",
- "30":"a #1 #2",
- "31":"a #1",
- "32":"a #1",
- "33":"a #1",
- "34":"a #1",
- "35":"a #1",
- "36":"a #1",
- "37":"a #1",
- "38":"a #1",
- "39":"a #1",
- "40":"a #1",
- "41":"a #1",
- "42":"a #1",
- "43":"a #1",
- "44":"a #1",
- "45":"a #1",
- "46":"a #1",
- "47":"a #1",
- "48":"a #1",
- "49":"a #1",
- "50":"a #1",
- "51":"a #1",
- "52":"a #1",
- "53":"a #1",
- "54":"a #1",
- "55":"a #1",
- "56":"a #1",
- "57":"a #1",
- "58":"a #1",
- "59":"a #1",
- "60":"a #1",
- "61":"a #1",
- "62":"a #1",
- "63":"a #1",
- "64":"a #1",
- "65":"a #1",
- "66":"a #1",
- "67":"a #1",
- "68":"a #1",
- "69":"a #1",
- "70":"a #1",
- "71":"a #1",
- "72":"a #1",
- "73":"a #1",
- "74":"a #1",
- "75":"a #1",
- "76":"a #1",
- "77":"a #1",
- "78":"a #1",
- "79":"a #1",
- "80":"a #1",
- "81":"a #1",
- "83":"a #1",
- "84":"a #1",
- "85":"a #1",
- "86":"a #1",
- "87":"a #1",
- "88":"a #1",
- "89":"a #1",
- "90":"a #1",
- "91":"a #1",
- "92":"a #1",
- "93":"a #1",
- "94":"a #1",
- "95":"a #1",
- "96":"a #1",
- "97":"a #1",
- "98":"a #1",
- "99":"a #1",
- "100":"a #1",
- "101":"a #1",
- "102":"a #1",
- "103":"a #1",
- "104":"a #1",
- "105":"a #1",
- "106":"a #1",
- "107":"a #1",
- "108":"a #1",
- "109":"a #1",
- "110":"a #1",
- "111":"a #1",
- "112":"a #1",
- "113":"a #1",
- "114":"a #1",
- "115":"a #1",
- "116":"a #1",
- "117":"a #1",
- "118":"a #1",
- "119":"a #1",
- "120":"a #1",
- "121":"a #1",
- "122":"a #1",
- "123":"a #1"
- },
- "safari":{
- "3.1":"a #1",
- "3.2":"a #1",
- "4":"a #1",
- "5":"a #1",
- "5.1":"a #1",
- "6":"a #1",
- "6.1":"a #1",
- "7":"a #1",
- "7.1":"a #1",
- "8":"a #1",
- "9":"a #1",
- "9.1":"a #1",
- "10":"a #1",
- "10.1":"a #1",
- "11":"a #1",
- "11.1":"a #1",
- "12":"a #1",
- "12.1":"a #1",
- "13":"a #1",
- "13.1":"a #1",
- "14":"a #1",
- "14.1":"a #1",
- "15":"a #1",
- "15.1":"a #1",
- "15.2-15.3":"a #1",
- "15.4":"a #1",
- "15.5":"a #1",
- "15.6":"a #1",
- "16.0":"a #1",
- "16.1":"a #1",
- "16.2":"a #1",
- "16.3":"a #1",
- "16.4":"a #1",
- "16.5":"a #1",
- "16.6":"a #1",
- "17.0":"a #1",
- "17.1":"a #1",
- "17.2":"a #1",
- "TP":"a #1"
- },
- "opera":{
- "9":"a #1",
- "9.5-9.6":"a #1",
- "10.0-10.1":"a #1",
- "10.5":"a #1",
- "10.6":"a #1",
- "11":"a #1",
- "11.1":"a #1",
- "11.5":"a #1",
- "11.6":"a #1",
- "12":"a #1",
- "12.1":"a #1",
- "15":"a #1",
- "16":"a #1",
- "17":"a #1",
- "18":"a #1",
- "19":"a #1",
- "20":"a #1",
- "21":"a #1",
- "22":"a #1",
- "23":"a #1",
- "24":"a #1",
- "25":"a #1",
- "26":"a #1",
- "27":"a #1",
- "28":"a #1",
- "29":"a #1",
- "30":"a #1",
- "31":"a #1",
- "32":"a #1",
- "33":"a #1",
- "34":"a #1",
- "35":"a #1",
- "36":"a #1",
- "37":"a #1",
- "38":"a #1",
- "39":"a #1",
- "40":"a #1",
- "41":"a #1",
- "42":"a #1",
- "43":"a #1",
- "44":"a #1",
- "45":"a #1",
- "46":"a #1",
- "47":"a #1",
- "48":"a #1",
- "49":"a #1",
- "50":"a #1",
- "51":"a #1",
- "52":"a #1",
- "53":"a #1",
- "54":"a #1",
- "55":"a #1",
- "56":"a #1",
- "57":"a #1",
- "58":"a #1",
- "60":"a #1",
- "62":"a #1",
- "63":"a #1",
- "64":"a #1",
- "65":"a #1",
- "66":"a #1",
- "67":"a #1",
- "68":"a #1",
- "69":"a #1",
- "70":"a #1",
- "71":"a #1",
- "72":"a #1",
- "73":"a #1",
- "74":"a #1",
- "75":"a #1",
- "76":"a #1",
- "77":"a #1",
- "78":"a #1",
- "79":"a #1",
- "80":"a #1",
- "81":"a #1",
- "82":"a #1",
- "83":"a #1",
- "84":"a #1",
- "85":"a #1",
- "86":"a #1",
- "87":"a #1",
- "88":"a #1",
- "89":"a #1",
- "90":"a #1",
- "91":"a #1",
- "92":"a #1",
- "93":"a #1",
- "94":"a #1",
- "95":"a #1",
- "96":"a #1",
- "97":"a #1",
- "98":"a #1",
- "99":"a #1",
- "100":"a #1",
- "101":"a #1",
- "102":"a #1",
- "103":"a #1",
- "104":"a #1"
- },
- "ios_saf":{
- "3.2":"a #1",
- "4.0-4.1":"a #1",
- "4.2-4.3":"a #1",
- "5.0-5.1":"a #1",
- "6.0-6.1":"a #1",
- "7.0-7.1":"a #1",
- "8":"a #1",
- "8.1-8.4":"a #1",
- "9.0-9.2":"a #1",
- "9.3":"a #1",
- "10.0-10.2":"a #1",
- "10.3":"a #1",
- "11.0-11.2":"a #1",
- "11.3-11.4":"a #1",
- "12.0-12.1":"a #1",
- "12.2-12.5":"a #1",
- "13.0-13.1":"a #1",
- "13.2":"a #1",
- "13.3":"a #1",
- "13.4-13.7":"a #1",
- "14.0-14.4":"a #1",
- "14.5-14.8":"a #1",
- "15.0-15.1":"a #1",
- "15.2-15.3":"a #1",
- "15.4":"a #1",
- "15.5":"a #1",
- "15.6-15.7":"a #1",
- "16.0":"a #1",
- "16.1":"a #1",
- "16.2":"a #1",
- "16.3":"a #1",
- "16.4":"a #1",
- "16.5":"a #1",
- "16.6-16.7":"a #1",
- "17.0":"a #1",
- "17.1":"a #1",
- "17.2":"a #1"
- },
- "op_mini":{
- "all":"a #1"
- },
- "android":{
- "2.1":"a #1",
- "2.2":"a #1",
- "2.3":"a #1",
- "3":"a #1",
- "4":"a #1",
- "4.1":"a #1",
- "4.2-4.3":"a #1",
- "4.4":"a #1",
- "4.4.3-4.4.4":"a #1",
- "119":"a #1"
- },
- "bb":{
- "7":"a #1",
- "10":"a #1"
- },
- "op_mob":{
- "10":"a #1",
- "11":"a #1",
- "11.1":"a #1",
- "11.5":"a #1",
- "12":"a #1",
- "12.1":"a #1",
- "73":"a #1"
- },
- "and_chr":{
- "119":"a #1"
- },
- "and_ff":{
- "119":"a #1"
- },
- "ie_mob":{
- "10":"a #1",
- "11":"a #1"
- },
- "and_uc":{
- "15.5":"a #1"
- },
- "samsung":{
- "4":"a #1",
- "5.0-5.4":"a #1",
- "6.2-6.4":"a #1",
- "7.2-7.4":"a #1",
- "8.2":"a #1",
- "9.2":"a #1",
- "10.1":"a #1",
- "11.1-11.2":"a #1",
- "12.0":"a #1",
- "13.0":"a #1",
- "14.0":"a #1",
- "15.0":"a #1",
- "16.0":"a #1",
- "17.0":"a #1",
- "18.0":"a #1",
- "19.0":"a #1",
- "20":"a #1",
- "21":"a #1",
- "22":"a #1",
- "23":"a #1"
- },
- "and_qq":{
- "13.1":"a #1"
- },
- "baidu":{
- "13.18":"a #1"
- },
- "kaios":{
- "2.5":"a #1",
- "3.0-3.1":"a #1"
- }
- },
- "notes":"Browsers have generally decided to not implement DNSSEC validation because the added complexity outweighs the improvements to the browser. DNSSEC is still useful as it is widely used to protect delivery of records between DNS servers, only failing to protect the delivery from the last DNS server to the browser.\r\n\r\n[Certificate transparency](https://developer.mozilla.org/en-US/docs/Web/Security/Certificate_Transparency) is widely used and tries to provide the same security as DNSSEC but by very different means.",
- "notes_by_num":{
- "1":"Does not support DNSSEC but still benefits greatly from it, as most of the security improvements are gained in the DNS-network and not in the browser.",
- "2":"Early versions of Chrome [experimented](https://www.imperialviolet.org/2011/06/16/dnssecchrome.html) with browser-level validation."
- },
- "usage_perc_y":0,
- "usage_perc_a":98.21,
- "ucprefix":false,
- "parent":"",
- "keywords":"DNS Security Extensions,Domain Name System Security Extensions,DNS based Authentication of Named Entities",
- "chrome_id":"",
- "shown":true
- }
|
