High Quality Content by WIKIPEDIA articles! DNSCurve is a proposed new secure protocol for the Domain Name System (DNS), designed by Daniel J. Bernstein. The basic idea is to define a secure new transport layer protocol to replace TCP, called CurveCP, using elliptic curve cryptography on top of UDP then doing DNS queries inside CurveCP. Because DNSCurve uses DNS CNAME records to prepend the CurveCP elliptic curve cryptography public keys to the DNS names of the DNS servers, Bernstein argues that the speed advantage of elliptic curve cryptography is fast enough and that DNSCurve could be implemented on the Internet much easier than DNSSEC.