Deploy360 24 February 2012

ICANN Publishes List of Domain Registrars Supporting DNSSEC

By Dan YorkDirector, Internet Technology

ICANNWe were very pleased to see that ICANN’s Security Team published a list of domain name registrars that support DNSSEC. At this point in the deployment of DNSSEC it’s not a very long list, but it’s a good start – and a list that we hope will grow rapidly in the months ahead.

As we note on our page about how to secure and sign your domain with domain registrars, registrars play a couple of roles in the DNSSEC process. Primarily, they accept “Delegation Signer” (DS) records that contain information about the keys that are used to sign your zone.

Many registrars are also “DNS hosting providers” and will automatically sign all your DNS records on your behalf. We’ve provided some DNSSEC signing tutorials on that page and have others in development.

It’s great to see ICANN maintaining that list and, as they note, if you know of more domain registrars who support DNSSEC, they would like to hear from you at [email protected] (and we’d love to write more tutorials for our pages).

Disclaimer: Viewpoints expressed in this post are those of the author and may or may not reflect official Internet Society positions.

Related articles

Improving Technical Security 15 March 2019

DNS Privacy Frequently Asked Questions (FAQ)

We previously posted about how the DNS does not inherently employ any mechanisms to provide confidentiality for DNS transactions,...

Improving Technical Security 14 March 2019

Introduction to DNS Privacy

Almost every time we use an Internet application, it starts with a DNS (Domain Name System) transaction to map...

Improving Technical Security 13 March 2019

IPv6 Security for IPv4 Engineers

It is often argued that IPv4 practices should be forgotten when deploying IPv6, as after all IPv6 is a...