DS Records for DNSSEC
Anthony Eden
on
CloudFlare recently announced DNSSEC support for all CloudFlare customers, a move that will potentially increase the number of DNSSEC-enabled DNS zones on the internet by quite a bit. In order for DNSSEC to work, you must be able to add a DS record for your domain which appears in the DNS records in TLD name servers. Starting today you can now add your DS record for any com, net or info domain registered through the DNSimple web site. We will continue adding support for additional TLDs in the future.
Here's how it works:
Enabling DNSSEC DS Records
First you must enable DNSSEC at your DNS provider. For example, if you are using CloudFlare, then you would need to enable DNSSEC:
Once it is enabled, you will see information about the DS record. We have two ways to enter the information, either field-by-field entry or quick entry, which allows you to paste the entire record into a single field. For CloudFlare you can just click the full DS record and it will be copied to your clipboard.
From there, log into to your DNSimple account and go to the domain's management page. At the bottom of the Domain tab you will see a card for enabling DS records. Click Configure DS Record.
Finally, either enter the details for the DS record in using the field-by-field method, or click on the Quick Entry tab and paste the entire record in.
DS Records for Anyone
You can use any DNS provider that supports DNSSEC, not just CloudFlare. Each DNS provider will be different, so you'll need to consult their documentation to determine how to turn on DNSSEC. You can also use DNSSEC if you run your own authoritative name server with DNSSEC support.
DNSSEC at DNSimple
DNSSEC is included in all our subscription plans. It can be enabled for free in all DNSimple domains. You can check our guide about DNSSEC for more information.
If you have any questions, get in touch – we're always happy to help. Not using DNSimple yet? Give us a try free for 30 days, and explore everything our automated DNS management has to offer.
Anthony Eden
I break things so Simone continues to have plenty to do. I occasionally have useful ideas, like building a domain and DNS provider that doesn't suck.
We think domain management should be easy.
That's why we continue building DNSimple.
