DNSSEC¶
DNSSEC is a security extension of the DNS protocol. It digitally signs the information published by DNS with a set of cryptographic keys, making it harder to fake, and thus more secure. It is strongly recommended that you do not enable this option unless you have a good understanding of what it is and does: you could easily make your domain name inoperative.
The interface for managing DNSSEC is available on the management page of your domain name. If your extension is eligible, you will see a „DNSSEC“ entry in your domain’s the navigation menu.
If you do not see „DNSSEC“, in the menu, it means your domain is not using our LiveDNS nameservers or is in an extension that does not allow DNSSEC at Gandi.
How to Install DNSSEC on Your Domain Name with LiveDNS¶
If you are using our LiveDNS our interface has been made very easy to use, as the entire process is automatic.
To enable DNSSEC, click the button that says „Enable DNSSEC“ on the bottom of the DNSSEC page.
We will then automatically set up the domain with the service.
Warnung
Please don’t change your nameservers until the propagation has been completed (12-24 hours), or it may become unreachable.
How to Install DNSSEC on Your Domain Name with external nameservers¶
You must first generate your keys. The most common method is to use the command-line tool called dnssec-keygen, distributed by the SAI, which you can run in a console session. Tutorials are available online that describe the use of this command.
Once you have generated your key, please test the server to be sure that it is working properly before continuing. When you are sure that it is behaving as expected, then submit the public key to the Registry, via the DNSSEC interface at Gandi.
The system will validate your key, and then send it to the registry associated with your domain name.
We left open the possibility of injecting up to 4 keys via the interface at Gandi. Obviously, it is possible to delete a given key at any time. When at least one key is active, you can simply add a new one just below the last.
Once your key is accepted by the registry, signed DNS requests will be honored.
Bemerkung
You can not add DS keys as we compute it for you with the KSK or ZSK, then we send it to the registry.
DNSSEC-enabled extensions at Gandi¶
abogado
ac
academy
accountant
accountants
adult
ae.org
africa
agency
airforce
alsace
amsterdam
apartments
app
archi
army
art
asia
associates
at
attorney
auction
audio
auto
autos
baby
band
bank
bar
barcelona
bargains
basketball
bayern
be
beer
bet
bible
bid
bike
bingo
bio
biz
black
blackfriday
blog
boats
boston
boutique
br.com
broker
brussels
build
builders
business
bzh
ca
cab
cafe
cam
camera
camp
capetown
capital
car
cards
care
career
careers
cars
casa
cash
casino
cat
catering
cc
center
ch
charity
chat
cheap
christmas
church
city
claims
cleaning
click
clinic
clothing
cloud
club
cn.com
co.com
co.uk
coach
codes
coffee
college
cologne
com
com.de
community
company
computer
condos
construction
consulting
contractors
cooking
cool
coop
corsica
country
coupons
courses
credit
creditcard
cricket
cruises
cx
cymru
date
dating
de
de.com
deals
degree
delivery
dental
dentist
desi
design
diamonds
diet
digital
direct
directory
discount
doctor
dog
domains
download
durban
earth
eco
education
email
energy
engineer
engineering
enterprises
equipment
es
estate
eu
eu.com
eus
events
exchange
expert
exposed
express
fail
faith
family
fan
fans
farm
fashion
feedback
fi
film
finance
financial
fish
fishing
fit
fitness
flights
florist
flowers
football
forex
forsale
foundation
fr
frl
fun
fund
furniture
fyi
gal
gallery
game
games
garden
gb.net
gdn
gent
gift
gifts
gives
glass
global
gmbh
gold
golf
gr
gr.com
graphics
gratis
green
gripe
group
gs
guide
guitars
guru
gy
hamburg
haus
health
healthcare
help
hiphop
hiv
hk
hn
hockey
holdings
holiday
homes
horse
hospital
host
hosting
house
how
ht
hu.net
icu
immo
in
in.net
industries
info
ink
institute
insurance
insure
international
investments
io
irish
ist
istanbul
jetzt
jewelry
joburg
jp.net
jpn.com
juegos
ki
kitchen
kiwi
koeln
kyoto
la
land
lat
law
lawyer
lease
legal
li
life
lighting
limited
limo
link
live
llc
loan
loans
lol
london
love
lt
ltd
ltda
lu
luxe
luxury
maison
makeup
management
market
marketing
markets
mba
me
me.uk
media
melbourne
memorial
men
menu
miami
mobi
moe
mom
money
mortgage
motorcycles
movie
mx
nagoya
name
navy
net
network
news
nf
ngo
ninja
nl
no
nrw
nu
nyc
nz
observer
okinawa
one
ong
online
ooo
org
org.uk
organic
osaka
page
paris
partners
parts
party
pe
pet
photo
photography
photos
pics
pictures
pizza
pl
place
plumbing
plus
pm
poker
porn
pr
press
pro
productions
promo
properties
property
protection
pub
quebec
racing
radio
re
realty
recipes
red
rehab
reise
reisen
reit
rent
rentals
repair
report
republican
rest
restaurant
review
rip
rocks
rodeo
ru.com
rugby
run
ryukyu
sa.com
saarland
sale
salon
sarl
sb
school
schule
science
scot
se
se.net
services
sex
sexy
sh
shoes
shop
shopping
show
singles
site
ski
soccer
social
software
solar
solutions
soy
space
sport
srl
storage
store
stream
studio
study
style
sucks
supplies
supply
support
surf
surgery
swiss
sx
systems
taipei
tattoo
tax
taxi
tc
team
tech
technology
tel
tennis
tf
theater
theatre
tickets
tienda
tips
tires
tirol
tl
today
tools
top
tours
town
toys
trade
trading
training
tube
tv
tw
uk
uk.com
uk.net
university
uno
us
us.com
us.org
vacations
vegas
ventures
vet
viajes
video
villas
vin
vip
vision
vlaanderen
vodka
vote
voto
voyage
wales
wang
watch
webcam
website
wedding
wf
whoswho
wien
wiki
win
wine
work
works
world
wtf
xn–3ds443g
xn–45q11c
xn–55qx5d
xn–5tzm5g
xn–6qq986b3xl
xn–czr694b
xn–czrs0t
xn–czru2d
xn–e1a4c
xn–fiq228c5hs
xn–fjq720a
xn–g2xx48c
xn–hxt814e
xn–io0a7i
xn–j6w193g
xn–mgbab2bd
xn–mk1bu44c
xn–ngbc5azd
xn–nyqy26a
xn–q9jyb4c
xn–rhqv96g
xn–t60b56a
xn–tckwe
xn–unup4y
xn–vhquv
xxx
xyz
yoga
yt
za
za.com
zone