 |
DNSSEC is a set of extensions to DNS which enable establishing a chain of trust for a domain. By signing their zone with DNSSEC, domain registrants protect the visitors of their websites against phishing, cache poisoning and many other Internet threats. |
Establishing a Chain of Trust
In order to establish a chain of trust, you need to:
- Sign the domain zone and upload it to the authoritative DNS server
- Log in to your personal account and go to the "Active Services" → Domains" section, enter the DNSKEY record, one or several DS records.
For gTLDs and foreign (i.e., not Russian) ccTLDs you can specify only a DS record.
Change Implementation Time
Change implementation time depends on when the changes were made and corresponds to domain delegation time:
- for .РФ and .SU domains - up to 2 hours;
- gTLDs and foreign ccTLDs are signed within a few minutes.
Turning Off DNSSEC
You may delete domain chain of trust in your personal account in the "Active Services" → Domains" section. This will delete all the DS records of the domain.