SIG(0) is a DNS request authentication method that uses cryptographic signatures to prove a message came from a trusted party and was not altered in transit. Unlike DNSSEC, which protects data records, SIG(0) is attached to individual DNS messages and can be used to authenticate dynamic updates or signed queries.
In cyber security, SIG(0) matters because it helps prevent spoofed DNS requests and unauthorized changes to DNS data. A server that validates SIG(0) can reject forged requests instead of processing them as if they were legitimate. At the same time, the parsing and verification code that handles SIG(0) becomes part of the attack surface: malformed signatures or records can trigger bugs, crashes, or policy failures if the implementation is weak. Defenders use SIG(0) selectively, where request authenticity is more important than simple reachability, and they must keep DNS software patched and carefully configured so authentication checks do not become a denial-of-service risk.