Authorization

/roʊl beɪst ˈæk.sɛs kənˌtroʊl/

noun — "permissions assigned by roles."

Role-Based Access Control, abbreviated RBAC, is an access control methodology where permissions to perform operations on resources are assigned to roles rather than individual users. Users are then assigned to these roles, inheriting the associated permissions. This model simplifies administration, improves security, and scales efficiently in environments with many users and resources.

/ˈæk.sɛs kənˌtroʊl/

noun — "governing who can use resources."

Access Control is a system or methodology used to regulate which users, processes, or devices can interact with resources within computing environments, networks, or information systems. It ensures that only authorized entities are allowed to read, write, execute, or manage specific resources, thereby protecting data integrity, confidentiality, and availability.

/ˈaɪ-æm/

n. “Who are you, and what are you allowed to do?”

IAM, short for Identity and Access Management, is the discipline and infrastructure that decides who can access a system, what they can access, and under which conditions. It sits quietly underneath modern computing, enforcing rules that most users never see — until something breaks, a permission is denied, or an audit comes knocking.

/ˈɛn-ɛs-siː-θriː/

n. “Proof of nothing — without revealing the map.”

NSEC3 is a record type in DNSSEC designed to provide authenticated denial of existence while mitigating the privacy concern inherent in the original NSEC records. Unlike NSEC, which directly reveals the next valid domain name in a zone, NSEC3 hashes domain names so that the zone structure cannot be trivially enumerated, making it more resistant to zone-walking attacks.

/ˈɛn-ɛs-siː/

n. “Proof of nothing — and everything in between.”

NSEC, short for Next Secure, is a record type used in DNSSEC to provide authenticated denial of existence. In plain terms, it proves that a queried DNS record does not exist while maintaining cryptographic integrity. When a resolver asks for a domain or record that isn’t present, NSEC ensures that the response cannot be forged or tampered with by an attacker.

/ˈdiː-ɛs/

n. “The chain that links the trust.”

DS, short for Delegation Signer, is a special type of DNS record used in DNSSEC to create a secure chain of trust between a parent zone and a child zone. It essentially tells resolvers: “The key in the child zone is legitimate, signed by authority, and you can trust it.”

/ˈɑːr-ɑːr-sɪɡ/

n. “Signed. Sealed. Verifiable.”

RRSIG, short for Resource Record Signature, is a record type used by DNSSEC to cryptographically sign DNS data. It is the proof attached to an answer — evidence that a DNS record is authentic, unmodified, and published by the rightful owner of the zone.

/ˈdiː-ɛn-ɛs-kiː/

n. “This is the key — literally.”

DNSKEY is a record type used by DNSSEC to publish the public cryptographic keys for a DNS zone. It is the anchor point for trust inside a signed domain. Without it, nothing can be verified, and every signature becomes meaningless noise.

/ˈdiː-ɛn-ɛs-sɛk/

n. “Proves the answer wasn’t forged.”

DNSSEC, short for Domain Name System Security Extensions, is a set of cryptographic mechanisms designed to protect the DNS from lying to you. Not from spying. Not from tracking. From quietly, efficiently, and convincingly giving you the wrong answer.

/aɪ-ˈæn-ə/

n. “The quiet custodian of the Internet’s master keys.”

IANA, short for Internet Assigned Numbers Authority, is the organization responsible for coordinating some of the most fundamental pieces of the Internet’s infrastructure. It does not route traffic, host websites, or spy on packets. Instead, it manages the shared registries that allow the global network to function as a single, interoperable system rather than a collection of incompatible islands.