The DNS infrastructure will be protected by a cryptographic key.

The US state of Virginia has generated the DNS master key (KSK), which will protect the domain name system. The key was created using DNSSEC technology. This key will be integrated into the DNS root zone.

Using the key, VeriSign will sign all changes to the root zone.

DNSSEC support has already been implemented on all DNS root servers. For full implementation of this technology, all that remains is to sign the root zone data with a special cryptographic key and publish the public key, which will allow all interested DNS users to verify the authenticity of the data.

DNSSEC protection in the DNS system will be fully available on July 15, 2010.