What is DNSSEC, and should I enable it for my domain?

What is DNSSEC, and should I enable it for my domain?

DNSSEC adds digital signatures to DNS information, allowing validating servers to detect forged or altered responses. It does not encrypt website traffic or replace an SSL/TLS certificate.

Enabling it depends on your domain extension and DNS service. Before making changes, check whether your DNS provider supports zone signing and how the domain’s DS record is published, if one is required. A mismatch between that record and the zone’s keys can make the domain inaccessible to visitors using DNSSEC validation. Ask the providers involved for instructions, and check the procedure again before changing nameservers.

RELATED QUESTIONS

Here are a few more questions whose answers may interest you. We answer important, practical questions for our customers.

SUBSCRIBE TO OUR NEWSLETTER

Join our newsletter. We only use it to share important information.

Newsletter subscription illustration