DNSSEC: What is it and how does it work

What is DNSSEC?

DNSSEC (Domain Name System Security Extensions) adds an additional layer of security to a domain's DNS servers. This helps prevent a large number of potential malicious activities.

How does it work?

When using DNSSEC, digital signatures are added to each of the involved parties: domain, DNS server, and Registry.

The process of accessing a site with DNSSEC enabled would be as follows:

• The visitor's browser checks the DNS servers associated with the domain.
• If the public digital signatures received match those published in the Registry, the browser considers the request valid and resolves the website, displaying its content.
• If for some reason the signatures do not match, the website would not be accessible.

Using DNSSEC at DonDominio

If your DNS provider allows the use of DNSSEC, you can configure your domain at DonDominio to work with this feature. To enable it, go to your domain management area, and in the DNS section, click on the three dots to select “Create DNSSEC entry”. Here, you can easily create the necessary records with the parameters provided by your DNS provider.

It is important to remember that if you enable DNSSEC, it is essential that the DNS server is also configured for this purpose; otherwise, the domain will not resolve.

How to check if it is correctly configured

You can easily check if DNSSEC is correctly configured on your domain and DNS servers. To do this, go to your domain management and in the "DNS" tab you will find the "Check DNS Propagation" button.