DNSSEC

DNSSEC adds cryptographic signatures to existing DNS records. This allows for the authentication of the origin of the data and ensures that it has not been altered in transit.

Setting up DNSSEC is done both on authoritative DNS servers and on a domain’s registrar:

a private key must be configured on the authoritative DNS servers,
and its public key, at the registrar.

Implementation at alwaysdata

Go to Domains > Details of [example.org] - ⚙️ > DNSSEC

The domain is registered via alwaysdata and uses alwaysdata’s DNS servers

Click on Activate.

This will create the key pair that will be configured on our DNS servers and at the registrar.

The domain is registered via alwaysdata but uses external DNS servers

Create the key pair with your DNS provider and then click on Add a public key using the elements provided by your DNS provider.

We will then configure this public key at the registrar.

The domain is not registered via alwaysdata but uses alwaysdata’s DNS servers

Click on Activate. This will create the key pair.

Copy the key and enter it with your registrar.