---
title: DNSSEC · Cloudflare Learning Paths
description: DNS Security Extensions (DNSSEC) adds an extra layer of authentication to DNS, ensuring requests are not routed to a spoofed domain.
lastUpdated: 2024-08-13T19:56:56.000Z
source_url:
  html: https://4fab8384.preview.developers.cloudflare.com/learning-paths/application-security/default-traffic-security/dnssec/index.md
  md: https://4fab8384.preview.developers.cloudflare.com/learning-paths/application-security/default-traffic-security/dnssec/
---

DNS Security Extensions (DNSSEC) adds an extra layer of authentication to DNS, ensuring requests are not routed to a spoofed domain.

For additional background on DNSSEC, visit the [Cloudflare Learning Center](https://www.cloudflare.com/learning/dns/dns-security/).

When you [enable DNSSEC](https://developers.cloudflare.com/dns/zone-setups/subdomain-setup/dnssec/), Cloudflare signs your zone, publishes your public signing keys, and generates your **DS** record.

Note:

Cloudflare automatically adds **DS** records for domains using Cloudflare Registrar or those using `.ch` and `.cz` top-level domains.
