General about DNSSEC
DNSSEC (Domain Name System Security Extensions) is a security improvement for domains that protects against tampering with your DNS data. With DNSSEC, visitors can verify that the DNS information they receive about your domain is genuine and has not been changed along the way.
In short, DNSSEC makes it much harder for hackers to redirect your traffic to a fake website.
How to create or update DNSSEC keys
Unfortunately, we do not currently offer DNSSEC management through our interface. However, you are very welcome to contact our support team at any time, and we will gladly assist you with setting up DNSSEC for your domain.
Rotating DNSSEC keys
For security reasons, you should rotate your DNSSEC keys regularly, typically once a year or according to your organization’s security policy. Rotation means creating new keys and registering the new information with the domain registry so that old keys cannot be misused.
Testing and verification
After setting up DNSSEC, we recommend that you test to ensure everything works correctly. You can use tools such as:
These tools can help you confirm that your DS records are correctly registered and that the signatures are being validated properly.
Remember when changing name servers
If you change your domain’s name servers at some point, you must also update the DNSSEC setup. New name servers need to be aware of your DNSSEC keys, otherwise validation will fail and your domain may become unavailable until the configuration is corrected.
