Manage DNSSEC
Updated 4 months ago
DNSSEC (Domain Name System Security Extensions) adds a layer of security to your domain by cryptographically signing DNS records. This protects against DNS spoofing and man-in-the-middle attacks by ensuring DNS responses haven't been tampered with.
How DNSSEC works
DNSSEC creates a chain of trust from the root DNS servers down to your domain. When enabled, DNS resolvers can verify that the DNS information they receive is authentic and hasn't been modified by attackers.
Benefits of DNSSEC:
Prevents DNS cache poisoning attacks
Protects against domain hijacking
Verifies the authenticity of DNS data
Increases overall domain security
DNSSEC is recommended for domains handling sensitive information or financial transactions, though it adds complexity to DNS management.
Enable DNSSEC
1. Open the Domain you want to manage
Go to the Domains tab and select your domain.
2. Find DNSSEC settings
Click "Advanced Settings" > "DNSSEC"
3. Enable DNSSEC
Enter a valid, necessary cryptographic key to activate.
4. Wait for activation
DNSSEC activation can take up to 48 hours to fully propagate. During this time, DNS queries continue to work normally.
Verify DNSSEC status
You can check if DNSSEC is working using online DNSSEC validators. Enter your domain name to see if DNSSEC signatures are valid and the chain of trust is intact.