VeriSign, Inc.
Method and system for parallel validation of domain name system security extension records

Abstract:

A parallelized method for authenticating and/or signing a DNS query using DNSSEC is disclosed. The method provides for obtaining, at a validating DNSSEC-aware DNS client, a DNS query for a resource record for a fully qualified domain name (FQDN); segmenting the FQDN into more than one specific sub-FQDN; providing, in parallel, a DNS query for a DNSSEC-related resource record for each of the more than one specific sub-FQDN to a respective authoritative name server or recursive resolver; obtaining, in parallel, the DNSSEC-related resource record for each of the more than one specific sub-FQDN; validating, in parallel, the DNSSEC-related resource record for each of the more than one specific sub-FQDN; combining each of the DNSSEC-related resource record for each of the more than one specific sub-FQDN; and verifying a chain-of-trust of the DNSSEC-related resource records.