3.2 What Is DNS?
Domain names give people a readable way to find websites and online services. People type names like:
google.com
wikipedia.org
michaelisuniversity.com
Computers, however, still need technical information in order to make the connection. A browser cannot reach a website just because a person typed a name. It has to find the address and records connected to that name.
This is where DNS comes in.
DNS stands for Domain Name System.
DNS is the system that helps translate domain names into the technical information computers need to find websites, email servers, and other Internet services.
Why DNS Exists
The Internet is built on communication between devices.
Computers, phones, servers, routers, and other devices need addresses so information can move from one place to another. Humans, however, usually do not want to memorize technical addresses.
It is much easier to remember:
michaelisuniversity.com
than it would be to remember a long IP address.
DNS exists because humans and computers use information differently.
Humans prefer names.
Computers need addresses and records.
DNS helps connect those two worlds.
A simple way to think about DNS is like a contact list.
In a contact list, you look up a person’s name to find their phone number. With DNS, a computer looks up a domain name to find the technical information needed to reach a website or service.
The comparison is not perfect, but it gives the basic idea:
A contact list connects names to phone numbers.
DNS connects domain names to technical Internet information.
DNS Does More Than Find Websites
DNS is often described as the system that turns domain names into IP addresses.
That is true, but DNS does more than that.
DNS can help with websites, email, verification, security, and other Internet services.
For example, DNS can help identify which servers handle email for a domain, which name servers are responsible for a domain, or whether a domain has published certain verification or security information.
This is why DNS matters so much. It is not only used when someone opens a webpage. It also supports many background systems that make the Internet work.
DNS Is Distributed
DNS is not one giant computer that stores every domain name in the world.
That would be too fragile, too slow, and too difficult to manage.
Instead, DNS is distributed.
This means the work is spread across many servers and organizations.
Different parts of the DNS system are responsible for different parts of the naming structure. Some servers help with the root of the DNS system. Other servers help with top-level domains like .com, .org, or .net. Other servers hold the official records for specific domains.
This distributed structure helps DNS support the massive scale of the Internet.
It also means that when your browser needs DNS information, the answer may come through a chain of systems rather than from one central place.
We will study that lookup process more carefully in the next section.
DNS Makes the Internet Flexible
DNS also makes the Internet more flexible.
A website can move from one server to another.
A company can change hosting providers.
An organization can update its email provider.
A business can add new services, subdomains, or security settings.
Through DNS, the domain name can stay the same while the technical setup behind it changes.
For example, a business may want customers to keep using the same domain name even if the company changes web hosting providers. DNS makes that possible by allowing the domain’s records to be updated.
From the user’s perspective, the name stays familiar.
Behind the scenes, the technical destination may change.
DNS, Trust, and Security
DNS matters for cybersecurity because people trust names.
When users see a familiar domain name, they often assume they are going to the right place. This is useful when everything is working properly, but it can also be abused.
Attackers may create fake or similar-looking domain names to trick people. They may also try to interfere with DNS settings or redirect users to the wrong place.
If users can be tricked about where they are going online, they may enter passwords, payment details, personal information, or private messages into the wrong place.
DNS is part of Internet navigation, but it is also part of digital trust.
One important DNS security technology is DNSSEC, which stands for Domain Name System Security Extensions.
DNSSEC helps protect DNS answers from certain kinds of tampering. It helps systems verify that DNS information came from the correct source and was not changed along the way.
A malicious website can still have valid DNS.
A scam website can still be reachable.
A dangerous domain can still have working records.
DNSSEC protects part of the navigation process. It does not guarantee that the destination is trustworthy.
DNS and Privacy
DNS can also affect privacy.
When a device asks DNS questions, those questions can reveal which domain names the device is trying to reach.
For example, if your computer asks for the address of a website, that DNS request may reveal something about what you are trying to access.
Modern privacy-focused DNS technologies, such as DNS over HTTPS and DNS over TLS, are designed to encrypt DNS queries in transit.
DNS over HTTPS is often called DoH.
DNS over TLS is often called DoT.
These technologies can make it harder for others on the network path to read or tamper with DNS requests.
However, they do not make a person fully anonymous.
They also do not prove that a website is safe.
They protect a specific part of the Internet navigation process: the DNS request in transit.
This is an important pattern in technology:
Security and privacy tools usually solve specific problems. They do not solve every problem.
Why This Matters
DNS is one of the hidden systems that makes the Internet usable.
With DNS, people can use readable names while computers still get the technical information they need.
DNS helps websites load.
DNS helps email work.
DNS helps apps connect to services.
DNS helps organizations move infrastructure without changing the names people already know.
DNS also creates important security and privacy questions.
Understanding DNS gives you a foundation for understanding web hosting, CDNs, email security, phishing, domain spoofing, Internet outages, encryption, privacy, and cybersecurity.
In the next section, we will look at how DNS finds a website. That section will explain the path from your browser, to a DNS resolver, to root servers, to top-level domain servers, and finally to the authoritative name server for a domain.