DNS security concepts

TSIG (Transaction SIGnatures) is a key-based security mechanism. It is suitable for securing communication between two servers. As an additional security measure TSIG uses shared secrets. TSIG is, for example, useful for the dynamic update.

The DNSSEC (DNS SECurity) extensions are also key-based. They use encryption with a public key.