We fully support DNSSEC on the extensions where it is available, and we encourage you to enable DNSSEC on your domains if you have not already done so.
What DNSSEC is
DNSSEC (Domain Name System Security Extensions) is an international security standard that adds cryptographic digital signatures to the DNS records of your domain. Simply put, it guarantees that when someone types your domain, they really reach your own servers and not someone pretending to be you.
Without DNSSEC, the DNS system trusts the responses it receives without being able to verify their authenticity. DNSSEC closes exactly this gap, creating a chain of trust from the registry of the extension all the way to your own domain.
What it offers you
- Protection against DNS spoofing and cache poisoning, attacks in which malicious third parties tamper with DNS responses to redirect your visitors to fake websites
- Protection against man-in-the-middle attacks during the resolution of your domain
- A guarantee of the integrity and authenticity of your DNS records, so that visitors always end up at the right destination
- Greater reliability and trust for your online presence, which is especially important for e-shops, email and services that handle sensitive data
- Protection of your domain's reputation, since a redirect to a fake page can seriously damage the image and operation of your business
DNSSEC and SSL
DNSSEC ensures the authenticity and integrity of DNS responses, but it does not encrypt traffic. It works alongside your SSL/TLS certificate. DNSSEC guarantees that you reach the right server, and SSL encrypts the communication with it.
How to enable DNSSEC
Enabling it is completely free and does not affect the operation of your website or email. For detailed steps and what DS records are, see the guide DNSSEC on a domain.
- In the Client Area, select the domain you want.
- Go to "Manage DNSSEC" from the Sidebar.
- Under "Add New DS Record", enter the details provided by your Control Panel.
- Once you have filled them in, click the "Add DS Record" button.
- Depending on the Registry, verification takes from a few seconds up to 1 minute.
- Refresh the page and you will see the green indicator with the confirmation "DNSSEC Verification: Successful".
That's it. DNSSEC is now enabled on your domain!
For any questions or for help, contact us via a ticket from the Client Area.
This article is licensed under Creative Commons Attribution 4.0 International (CC BY 4.0). You may republish it, provided you credit Konet as the source with a link to this article.
