DNSSec


DNSSec

DNSSec lets domain owners give their registrar a key that permits DNS clients to verify the records they are receiving are valid ones for the zone.

This check can help to protect DNS clients getting spoofed records from their ISP name servers.

After you enable DNSSec you will need to add a key at your DNS registrar.

About RimuHosting and Zonomi DNSSec

We use live signing. As a consequence we recommend you do not enable DNSSec here if this zone is secondary (with external primaries), or a primary (to external secondaries).

We use NSEC3 which permits resolvers to verify the non-existence of a domain name.

To enable DNSSec you can turn it on in the control panel:

After you have turned on DNSSec in our control panel you will also need to add your DNS public key at your domain name registrar.


Leave a Reply