DNSSEC

DNSSEC is a security extension of the DNS protocol. It digitally signs the information published by DNS with a set of cryptographic keys, making it harder to fake, and thus more secure. It is strongly recommended that you do not enable this option unless you have a good understanding of what it is and does: you could easily make your domain name inoperative.

The interface for managing DNSSEC is available on the management page of your domain name. If your extension is eligible, you will see a “DNSSEC” entry in your domain’s the navigation menu.

If you do not see “DNSSEC”, in the menu, it means your domain is not using our LiveDNS nameservers or is in an extension that does not allow DNSSEC at Gandi.

How to Install DNSSEC on Your Domain Name with LiveDNS

If you are using our LiveDNS our interface has been made very easy to use, as the entire process is automatic.

To enable DNSSEC, click the button that says “Enable DNSSEC” on the bottom of the DNSSEC page.

We will then automatically set up the domain with the service.

Warning

Please don’t change your nameservers until the propagation has been completed (12-24 hours), or it may become unreachable.

How to Install DNSSEC on Your Domain Name with external nameservers

You must first generate your keys. The most common method is to use the command-line tool called dnssec-keygen, distributed by the SAI, which you can run in a console session. Tutorials are available online that describe the use of this command.

Once you have generated your key, please test the server to be sure that it is working properly before continuing. When you are sure that it is behaving as expected, then submit the public key to the Registry, via the DNSSEC interface at Gandi.

The system will validate your key, and then send it to the registry associated with your domain name.

We left open the possibility of injecting up to 4 keys via the interface at Gandi. Obviously, it is possible to delete a given key at any time. When at least one key is active, you can simply add a new one just below the last.

Once your key is accepted by the registry, signed DNS requests will be honored.

Note

You can not add DS keys as we compute it for you with the KSK or ZSK, then we send it to the registry.

DNSSEC-enabled extensions at Gandi

  • abogado
  • ac
  • academy
  • accountant
  • accountants
  • adult
  • ae.org
  • africa
  • agency
  • airforce
  • alsace
  • amsterdam
  • apartments
  • app
  • archi
  • army
  • art
  • asia
  • associates
  • at
  • attorney
  • auction
  • audio
  • auto
  • autos
  • baby
  • band
  • bank
  • bar
  • barcelona
  • bargains
  • basketball
  • bayern
  • be
  • beer
  • bet
  • bible
  • bid
  • bike
  • bingo
  • bio
  • biz
  • black
  • blackfriday
  • blog
  • boats
  • boston
  • boutique
  • br.com
  • broker
  • brussels
  • build
  • builders
  • business
  • bzh
  • ca
  • cab
  • cafe
  • cam
  • camera
  • camp
  • capetown
  • capital
  • car
  • cards
  • care
  • career
  • careers
  • cars
  • casa
  • cash
  • casino
  • cat
  • catering
  • cc
  • center
  • ch
  • charity
  • chat
  • cheap
  • christmas
  • church
  • city
  • claims
  • cleaning
  • click
  • clinic
  • clothing
  • cloud
  • club
  • cn.com
  • co.com
  • co.uk
  • coach
  • codes
  • coffee
  • college
  • cologne
  • com
  • com.de
  • community
  • company
  • computer
  • condos
  • construction
  • consulting
  • contractors
  • cooking
  • cool
  • coop
  • corsica
  • country
  • coupons
  • courses
  • credit
  • creditcard
  • cricket
  • cruises
  • cx
  • cymru
  • date
  • dating
  • de
  • de.com
  • deals
  • degree
  • delivery
  • dental
  • dentist
  • desi
  • design
  • diamonds
  • diet
  • digital
  • direct
  • directory
  • discount
  • doctor
  • dog
  • domains
  • download
  • durban
  • earth
  • eco
  • education
  • email
  • energy
  • engineer
  • engineering
  • enterprises
  • equipment
  • es
  • estate
  • eu
  • eu.com
  • eus
  • events
  • exchange
  • expert
  • exposed
  • express
  • fail
  • faith
  • family
  • fan
  • fans
  • farm
  • fashion
  • feedback
  • fi
  • film
  • finance
  • financial
  • fish
  • fishing
  • fit
  • fitness
  • flights
  • florist
  • flowers
  • football
  • forex
  • forsale
  • foundation
  • fr
  • frl
  • fun
  • fund
  • furniture
  • fyi
  • gal
  • gallery
  • game
  • games
  • garden
  • gb.net
  • gdn
  • gent
  • gift
  • gifts
  • gives
  • glass
  • global
  • gmbh
  • gold
  • golf
  • gr
  • gr.com
  • graphics
  • gratis
  • green
  • gripe
  • group
  • gs
  • guide
  • guitars
  • guru
  • gy
  • hamburg
  • haus
  • health
  • healthcare
  • help
  • hiphop
  • hiv
  • hk
  • hn
  • hockey
  • holdings
  • holiday
  • homes
  • horse
  • hospital
  • host
  • hosting
  • house
  • how
  • ht
  • hu.net
  • icu
  • immo
  • in
  • in.net
  • industries
  • info
  • ink
  • institute
  • insurance
  • insure
  • international
  • investments
  • io
  • irish
  • ist
  • istanbul
  • jetzt
  • jewelry
  • joburg
  • jp.net
  • jpn.com
  • juegos
  • ki
  • kitchen
  • kiwi
  • koeln
  • kyoto
  • la
  • land
  • lat
  • law
  • lawyer
  • lease
  • legal
  • li
  • life
  • lighting
  • limited
  • limo
  • link
  • live
  • llc
  • loan
  • loans
  • lol
  • london
  • love
  • lt
  • ltd
  • ltda
  • lu
  • luxe
  • luxury
  • maison
  • makeup
  • management
  • market
  • marketing
  • markets
  • mba
  • me
  • me.uk
  • media
  • melbourne
  • memorial
  • men
  • menu
  • miami
  • mobi
  • moe
  • mom
  • money
  • mortgage
  • motorcycles
  • movie
  • mx
  • nagoya
  • name
  • navy
  • net
  • network
  • news
  • nf
  • ngo
  • ninja
  • nl
  • no
  • nrw
  • nu
  • nyc
  • nz
  • observer
  • okinawa
  • one
  • ong
  • online
  • ooo
  • org
  • org.uk
  • organic
  • osaka
  • page
  • paris
  • partners
  • parts
  • party
  • pe
  • pet
  • photo
  • photography
  • photos
  • pics
  • pictures
  • pizza
  • pl
  • place
  • plumbing
  • plus
  • pm
  • poker
  • porn
  • pr
  • press
  • pro
  • productions
  • promo
  • properties
  • property
  • protection
  • pub
  • quebec
  • racing
  • radio
  • re
  • realty
  • recipes
  • red
  • rehab
  • reise
  • reisen
  • reit
  • rent
  • rentals
  • repair
  • report
  • republican
  • rest
  • restaurant
  • review
  • rip
  • rocks
  • rodeo
  • ru.com
  • rugby
  • run
  • ryukyu
  • sa.com
  • saarland
  • sale
  • salon
  • sarl
  • sb
  • school
  • schule
  • science
  • scot
  • se
  • se.net
  • services
  • sex
  • sexy
  • sh
  • shoes
  • shop
  • shopping
  • show
  • singles
  • site
  • ski
  • soccer
  • software
  • solar
  • solutions
  • soy
  • space
  • sport
  • srl
  • storage
  • store
  • stream
  • studio
  • study
  • style
  • sucks
  • supplies
  • supply
  • support
  • surf
  • surgery
  • swiss
  • sx
  • systems
  • taipei
  • tattoo
  • tax
  • taxi
  • tc
  • team
  • tech
  • technology
  • tel
  • tennis
  • tf
  • theater
  • theatre
  • tickets
  • tienda
  • tips
  • tires
  • tirol
  • tl
  • today
  • tools
  • top
  • tours
  • town
  • toys
  • trade
  • trading
  • training
  • tube
  • tv
  • tw
  • uk
  • uk.com
  • uk.net
  • university
  • uno
  • us
  • us.com
  • us.org
  • vacations
  • vegas
  • ventures
  • vet
  • viajes
  • video
  • villas
  • vin
  • vip
  • vision
  • vlaanderen
  • vodka
  • vote
  • voto
  • voyage
  • wales
  • wang
  • watch
  • webcam
  • website
  • wedding
  • wf
  • whoswho
  • wien
  • wiki
  • win
  • wine
  • work
  • works
  • world
  • wtf
  • xn–3ds443g
  • xn–45q11c
  • xn–55qx5d
  • xn–5tzm5g
  • xn–6qq986b3xl
  • xn–czr694b
  • xn–czrs0t
  • xn–czru2d
  • xn–e1a4c
  • xn–fiq228c5hs
  • xn–fjq720a
  • xn–g2xx48c
  • xn–hxt814e
  • xn–io0a7i
  • xn–j6w193g
  • xn–mgbab2bd
  • xn–mk1bu44c
  • xn–ngbc5azd
  • xn–nyqy26a
  • xn–q9jyb4c
  • xn–rhqv96g
  • xn–t60b56a
  • xn–tckwe
  • xn–unup4y
  • xn–vhquv
  • xxx
  • xyz
  • yoga
  • yt
  • za
  • za.com
  • zone