DNSSEC

Back

The settings of the DNS zones signed from now on. A signed zone keeps the settings it was signed with.

ECDSA keys are small and supported by all registrars and resolvers.
Authenticated denial of existence
Keys
One combined key (KSK and ZSK) per zone, made and used by BIND; it is not rolled over automatically, so the DS record at the registrar stays the same.
Cancel