VeriSign says it is on schedule to support security extensions for DNS (DNSSEC) for the .com and .net top-level domains by the first half of 2011. The registry operator is currently testing its systems and upgrading some infrastructure to handle higher bandwidth as a result of the authentication technology. DNSSEC is also being rolled out on other top-level domains. As Joe Waldron, a product manager in VeriSign's Naming (DNS) Group, explains, the technology will act as an authentication layer to help safeguard against man-in-the-middle attacks. It will also allow registries to offer new services, he said. The interview was conducted in March at the 2010 RSA Conference.