Using DNSSEC

Traditionally, DNSSEC has been difficult to set up and use. Multiple digital keys are needed to sign records, and keys need to be changed on a regular basis. Changing keys involves uploading new files at the domain name registrar, allowing for a period where both the old and new keys are used, and then deleting the old keys. The frequency of changes varies depending on the type of keys.

We’ve made DNSSEC easy. If you use pair Domains name servers, all you have to do is click a button. We take care of generating and changing the keys.

You can follow these steps to use DNSSEC with our name servers:

1. Log into the Domain Name Management System
2. Click the domain to update
3. Click Domain Address Settings
4. If Custom DNS is already on for your domain, you can skip this step.
   If you are turning on Custom DNS, read the warning, agree to the Terms of Service, and click Enable
5. Under DNSSEC, select on and click Modify

If you use name servers from other providers, you can add DNSSEC records by following these steps:

1. Log into the Domain Name Management System
2. Click the domain to update
3. Click Upload DS Records
4. You can add records by entering the Key Tag, selecting the Algorithm, selecting the Digest Type, and entering the Digest.
   Alternately, you can upload a DSSET file