Knowledge base
1000 FAQs, 500 tutorials and instructional videos. Here, there are only solutions!
Secure web traffic with DNSSEC
This guide explains what DNSSEC is and how this protection enhances the security of Domains at Infomaniak and the traffic they generate.
Introduction
- Each URL corresponds to an IP address, and when an internet user enters the URL of your site into their web browser, they access a DNS server whose role is to redirect them to the IP address that corresponds to the domain entered (technically, this is called DNS resolution).
- When DNSSEC is not enabled on your domain name, a malicious person could detect a flaw in a DNS server and modify the correspondence between your domain name and the IP address of your site to the IP address of their choice. In such a case, the internet user who enters the URL of your site would then be redirected to another website that does not correspond to the content of your website.
- DNSSEC secures the authenticity of the response provided by the DNS server, thus guaranteeing that internet users are accessing the website they actually intend to visit.If a hacker were to attempt to modify the IP address of your domain name in a DNS server protected by DNSSEC during resolution, the latter would reject their requests because they would not be authenticated.
- DNSSEC is therefore an additional security measure for a website's SSL certificate, ensuring that the user is directed to the website corresponding to the entered URL, and the SSL certificate then encrypts the communication between the user's web browser and the website's web server.
Enable or disable DNSSEC
To find out about the availability of DNSSEC for a specific domain, please refer to the specifications of the extensions that concern you on this page (under Frequently Asked Questions by clicking on the relevant extension first).
DNSSEC is available and already enabled upon purchase for the vast majority of domain name extensions.
If necessary, DNSSEC can be activated in a few clicks for fully managed domain names at Infomaniak:
- Click here to access the management of your product on the Infomaniak Manager (need help?).
- Click directly on the name assigned to the product in question.
- Enable or disable DNSSEC from the domain's Dashboard:
If the DNS zone for your domain is managed by another registrar, you will need to provide technical information provided by that registrar.If the information provided is incorrect, your domain name will no longer be accessible.. Therefore, it is recommended to transfer the complete management of your domain to Infomaniakbefore enabling DNSSEC if you are not familiar with these operations.
Check if DNSSEC is enabled
DNSSEC propagation to the registry may take several hours to complete.
Enter the domain name to check on this analysis site.
Specific guide
Link to this FAQ: https://faq.infomaniak.com/2208
Has this FAQ been helpful?