+1 coinfor reading to the end
+1
Home / Glossary / TSIG
Glossary · Protocol

TSIG

Transaction Signature

In plain language

A way of signing messages between DNS servers so they only accept updates from trusted sources.

The metaphor

Like a signed delivery note on each DNS update.

Going deeper

How it works

  • It uses a shared secret.
  • Each message carries a signature.
  • Servers reject unsigned changes.
  • Used mostly by people who run their own DNS servers.
In practice
  • A server accepts an update from a trusted partner.
  • A copy of a zone moves between servers.
  • An administrator adds a shared secret.

A question owners ask

Does it apply to me?

Only if you run your own DNS servers. Most businesses use a provider.

Related terms
AHAuthentication HeaderARPAddress Resolution ProtocolBGPBorder Gateway ProtocolCCMPCounter Mode/CBC-MAC ProtocolCHAPChallenge Handshake Authentication ProtocolCRCCyclical Redundancy CheckEAPExtensible Authentication ProtocolESPEncapsulated Security Payload

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →