TechNest
Start

Guides · DNS

When to turn on DNSSEC

DNSSEC signs the DNS answer so it cannot be swapped. If the name servers do not support it, the site breaks.

First be sure the name servers actually serve DNSSEC. If you are not sure, leave it off. When it is on, enter the keys in the DNSSEC tool for that domain only.

  1. Open the DNSSEC tool from the domain registration.
  2. Enter the digest and algorithm the server gave you.
  3. If the site stops opening, remove the record and try again. Do not guess.

Related guides

When to turn on DNSSEC · TechNest Hosting