This guide explains what DNSSEC is and how this protection enhances the security of Domains at Infomaniak and the traffic they generate.

Preamble

• Each URL corresponds to an IP address, and when an internet user enters the URL of your site into their web browser, they contact a DNS server whose role is to redirect them to the IP address that corresponds to the entered domain (technically, this is known as DNS resolution).
• When DNSSEC is not activated on your domain name, a malicious person could detect a vulnerability in a DNS server and modify the correspondence between your domain name and your site's IP address with an IP address of their choice. In such a case, the user who enters the URL of your site would be redirected to another website that does not match the content of your website.
• DNSSEC secures the authenticity of the response provided by the DNS server and thus ensures that users are viewing the website they actually want to see. If a hacker attempted to modify the IP address of your domain name in a DNS server protected by DNSSEC at the time of resolution, the server would reject their requests because they would not be authenticated.
• DNSSEC is therefore an additional security measure to the site's SSL certificate. DNSSEC ensures that the user is directed to the site that corresponds to the entered URL, and the SSL certificate then encrypts the exchanges between the user's web browser and the site's web server.

Enable DNSSEC

To find out if DNSSEC is available for a specific domain, refer to the specifics of the extensions that concern you from this page (under Frequently Asked Questions by first clicking on the relevant extension).

If necessary, DNSSEC can be activated in a few clicks on domains fully managed by Infomaniak:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the concerned product.
3. If necessary, activate DNSSEC from the Dashboard of the domain:
   

Check if DNSSEC is activated

Enter the domain name to verify on this analysis site.

Learn more

• Set up DNSSEC with the CDN Cloudflare

This guide explains how to modify the details linked to a domain name, i.e., the “WHOIS” details of the owner / holder / administrator.

Preamble

• Domain names have a unique feature: each has an owner whose details are specific to the domain itself, independent of the user account managing the product with the host or registry.
• These details related to the domain name are called WHOIS details and indicate information such as first name, last name, postal address, email address, etc.
• They have no connection with the Infomaniak user account details.
• They can be viewed online using WHOIS services (whois.infomaniak.com or whois.nic.swiss for example) and additional private coordinates sometimes exist upstream.
• This information outside of the public WHOIS is never visible and/or communicated by Infomaniak without prior authentication!
• They will always be considered valid in case of a dispute regarding the ownership of a domain name, it is therefore important to keep this information up to date even if you activate Domain Privacy to mask this information.
• Any modification of WHOIS coordinates must be validated by the current contact. The latter will receive an email with a validation link valid for two days to validate the changes. The change will not be made if all actions are not completed entirely and before the deadline expires!
• Depending on the extension of the domain in question, these operations may incur fees.

Manage WHOIS information

To access your domain names:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the **name** assigned to the product in question.
3. Click on WHOIS Information in the left sidebar:
   

Then, several options are available under Domain Owner:

• Click on the Edit button to edit the language (of certain emails) as well as the postal and telephone coordinates without delay.
  
• Click on the Change Owner button to modify other elements, but you will need to obtain the agreement of both parties before applying:
  
  • Choose an existing contact record (this may be the case if you own other domain names)…
  • … or click the Add button to create a completely new contact record.

You can also do this for multiple domains at once: a contact record can be linked to several domains; therefore, modifying a record will automatically update all domains with the same WHOIS contact.

This guide presents the DNS Diagnostic tool, which allows you to check that the relationships between…

• DOMAIN NAME at Infomaniak
  
  and
   
• MAIL SERVICE at Infomaniak

… are correct, so that Mail traffic goes to the right place.

Introduction

• To check, the tool verifies the MX, SPF, etc. records.
• You will thus be able to detect and correct certain Mail problems, especially if they are related to DNS (technical information that, broadly speaking, determines where such and such Mail traffic should be directed) by acting at the level of your domain.
• Automatic correction is only possible when the domain name is present in the same Organization as the product to which it must be attached.
  • If this is not the case, then the correction will need to be done manually.

Diagnose a DNS issue

To access the DNS diagnostic for your domain name:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product in question.
3. Click on Domain Management in the left sidebar.
4. Click on DNS Diagnostic in the left sidebar:
   
   • If DNS issues are detected, a red display on the table indicates it:
     1. Correct each error individually by clicking the button to the right of the concerned element…
     2. … or all errors at once.

Refer to this other guide regarding the same automatic verification process but for Web Hosting.

And if necessary, familiarize yourself with the mail-related security diagnostic.

The BIMI standard (Brand Indicators for Message Identification, brand indicators for message identificationoffers companies the possibility to incorporate their logo into sent emails.

Preamble

• The Infomaniak applications (and other companies around the globe - read the chapter in case of issue below) are compatible with BIMI and will display the logos next to the received emails.
• Infomaniak Mail Services allow you to configure your email with your logo (be sure to read the prerequisites); the benefits are numerous:
  • increased trust: recipients can visually identify your emails, thus reducing the risk of phishing.
  • brand reinforcement: a clearly visible logo in inboxes enhances brand recognition.
  • better deliverability: emails compliant with DMARC have a higher chance of reaching the main inbox.

1. Create a logo

Create a logo in SVG (Scalable Vector Graphics) format. This format is required as it ensures optimal quality regardless of the device or display size.

To be imported into the Infomaniak interface (see below), it must not exceed 10 MB, but it can also be hosted on a publicly accessible secure server and you will simply need to provide its URL for the BIMI DNS record.

2. Obtain the VMC certificate

A verified logo certification (VMC) is required; it certifies that you are the legitimate owner of the logo. You can obtain this certification from recognized certification authorities such as DigiCert and Entrust.

When your VMC certificate is issued, you receive a PEM file containing the entity certificate. This PEM file includes your SVG format logo as well as the VMC.

3. Add the logo to Service Mail

Prerequisites

• All the indicators for Global Security of your Mail Service must be green (SPF + DKIM + DMARC)!

To access the Service Mail and set your company's logo:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product in question.
3. Click on Global Security in the left sidebar.
4. Click on the Create button (in the BIMI section):
   
5. Fill in the requested information based on the received documents (see chapter 2 above) and do not forget to save.

In case of trouble

• If the Create button in the BIMI box remains grey, make sure to check the informative messages: DMARC may exist but may not be at the required rejection percentage, so adjust the parameters according to the indications.
• When there are multiple domains linked to the Service Mail, you must ensure that you have a certificate for each linked domain if you want BIMI on them.
• Note that Microsoft Outlook, Apple Mail, Thunderbird, the Mail app from Samsung, among others, have not yet adopted BIMI.

Disable BIMI

To disable BIMI, simply go to the domain name management page linked to the Service Mail and delete the corresponding TXT record.

This guide explains how to order a DNS zone from Infomaniak.

Preamble

• Having the DNS zone at Infomaniak is useful if your domain name is registered elsewhere (third-party provider/registrar) and you want to easily link this domain with Infomaniak products.
• Indeed, it is not enough to have a site domain.xyz at Infomaniak and to indicate the 2 DNS addresses of Infomaniak at the registrar of the domain name (if it is not Infomaniak) for the site to display when you type domain.xyz in a browser.
• You must add a DNS zone in the same place as the hosting to make the site work easily.
• This will also be particularly useful if the provider managing your domain name does not offer DNS zone management.
   

Order a DNS zone

To do this:

1. Click here to access the Shop Infomaniak.
2. Start a search with the name of the domain registered elsewhere.
3. Click on the action menu ⋮ located to the right of the result obtained.
4. Select Order a DNS zone:
   
5. Complete the purchase.
6. Once added to your Manager, the zone can be edited.

This guide explains add a new domain name to a website Infomaniak.

Preamble

• When you add a new domain name to a website, we talk about related area but also of aliases.
• An alias domain in this case is an additional domain name, also linked to an existing site.
  • To make the website domain.xyz be reachable with a whole other domain name like private.abc e.g., add private.abc as the alias of the website.
  • Second example, so that the site domain.xyz can also be reached with www. domain.xyz, it must be added as an alias to the domain domain.xyz In this example, domain.xyz is the parent site of the alias www.domain.xyz In general, the alias www is already added automatically and now...

Add an alias to an existing site

Prerequisites

• If the domain name (intended to become alias) or its DNS area is managed by Infomaniak, everything is OK. If not:
  • Domain name registration A must point to Infomaniak.
  • To simplify, you canentrusting the management of the domain to Infomaniak.
• It is also necessary that the future alias is not already so, in which case it will have to be the disconnect from the current site in advance (i.e. synonym).

To add an additional domain that will be linked to your website:

1. Click here in order to access the management of your product on the Manager Infomaniak (Need help?).
2. Click directly on the nameallocated to the product concerned:
   
3. Then click on the chevron ‍ to develop the game Areas of this site.
4. Click on the button Add Domain:
   
5. Enter the domain name(s) to be added, separating them by the key Enter.
6. If the alias or its DNS area is managed by Infomaniak, it is possible to automatically update DNS entries In the opposite case, make any changes to your registrar or transfer domain name management to Infomaniak.
7. If you have an SSL certificate like Let's Encrypt e.g. you can ask the update here to include the new names.
8. Click on Validate to complete the procedure:
   

To define the alias as the main domain, take note of this other guide.

This guide explains how‍ to create subdomains on an existing Infomaniak hosting, using a .htaccess file.

Preamble

• The hosting can be on a Shared Web Hosting offer or on a Cloud Server but this function is impossible with a Starter hosting.
• Subdomains can be added very easily to your current hosting since you have 20 sites per hosting (sites = subdomains) included in the base offer.
• If you do not wish to use this available site volume, you can follow the method below.
   

Create a subdomain as a shortcut

The subdomains created in this way help to organize a hosting. For example, the address vlog.domain.xyz will be a shortcut for the address domain.xyz/vlog. In other words, the address vlog.domain.xyz will redirect to the folder vlog which must be located at the root of the website domain.xyz. In this example, vlog is the subdomain of domain.xyz.

1. Add the subdomain as an alias for your website

To do this:

1. Follow the alias addition procedure but please read points 2 and 3 below.
2. In the field to add the linked domain, enter the full address of the subdomain (e.g. vlog.domain.xyz).
3. If your domain or its DNS zone is managed by Infomaniak, enable the following two options: Update the DNS records for this domain and Replace existing entries ; if that is not the case, create a A record with your registrar with the following information:
   • field: the full URL address of the subdomain (e.g. vlog.domain.xyz)
   • target: the IPv4 address (A record) of your site (refer to this other guide to find the A record of your site)

2. Modify the .htaccess file of your website

Using your FTP software/client or the FTP Manager, add and adapt the following code in the .htaccess file located at the root of your website:

RewriteCond %{HTTP_HOST} ^(.*)\.domain\.xyz [NC]
RewriteCond %{DOCUMENT_ROOT}/%1/ -d
RewriteCond %1::%{REQUEST_URI} !^(.*?)::/\1/?
RewriteRule "^(.*)$" "%{DOCUMENT_ROOT}/%1/$1" [L]

Explanation for the third line: https://stackoverflow.com/a/15981056

Replace on the first line:

• domain with your domain name
• xyz by the extension of your domain name (ch, fr, etc.)

Now, the address vlog.domain.xyz should display the content of the vlog folder located at the root of your website. If this is not the case, check that the vlog folder actually exists at the root of your website.

This guide explains how to add or modify one or more A and AAAA type records in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Introduction

• This type of record allows a domain name to point to a static IP address (usually a server), type A for IPv4 and AAAA for IPv6.
• This is the method generally used to redirect your domain name to the IP address of the web server where your website is hosted. Moreover, this type of pointing is used automatically to link your domain name with your website if both are in the same place and in the same Infomaniak Organization.
• You should only modify this type of record if you have a specific configuration to implement (e.g., pointing a subdomain to an external application).

Modify the DNS zone

Refer to this other guide to manage this type of record in a DNS zone.

This guide details the specifics of the .swiss domain extension, which is subject to particular conditions.

Preamble

• Previously reserved for companies, registration for a .swiss is now open to individuals and sole proprietors not registered in the commercial register.
• You can now submit your registration request to increase your chances and secure your last name or brand.
• By submitting your request now, Infomaniak will immediately forward your request to the Federal Office of Communication for review.
• As for business registrations, it is not immediate and the waiting period of several weeks is independent of Infomaniak. Your requests will be refused if they do not meet certain conditions.
  • Find out more: nic.swiss and dot.swiss

Reserve your .swiss domain

Beyond a unique opportunity to reserve your family name or brand:

• Unlike the .ch which is accessible to everyone, the .swiss extension is subject to validation by the Federal Office of Communication (OFCOM).
• The .swiss certifies your presence in the Swiss market and sends a strong and credible signal to your Swiss and international partners.
• Get 2 free email addresses with your .swiss domain by ordering a kSuite standard user, which includes all productivity applications and 15 GB of kDrive storage.
• Infomaniak offers the best price for the .swiss, including after the first year's promotional period.

The complete conditions for individuals and sole proprietorships are specified during the order process, however:

• It is necessary to be a natural person residing in Switzerland or a Swiss national.
• Swiss nationals living abroad can also apply for a .swiss for private, charitable, or associative purposes.
• The desired .swiss domain must contain one of the following elements related to the person registering the domain:
  • one of the official names or other names registered in the civil registry
  • one of the first names
  • a last name
  • a registered partnership name
  • a name received in a religious order
  • a stage name under which the person is known
  • a name related to a distinctive sign (e.g., a registered trademark) on which the applicant has rights

This guide presents commands that can be executed to test a connection or a network and thus further specify the potential source of error.

Perform a Telnet…

TELNET allows you to test the connection to a server without considering all the additional settings of a mail or FTP application in order to determine the source of a problem. If the connection does not go through on an SMTP server, for example, you will need to check if your firewall is not blocking port 587 or 465.

… on macOS

1. Look for Network Utility.
2. Go to the Ping, Lookup or Traceroute tab depending on what you want to test.
3. You can also use a terminal application (command line interface, CLI) on your device and, depending on what you want to test, enter:
   traceroute [server] 
nc [server] [port] 
   Replace [server] with the server name or its IP address, same for [port]…

… on Windows

Enable Telnet in advance if necessary.

1. Use a command-line interface (CLI) application like Terminal on your device, for example by typing Run then cmd.
2. In the window that opens, depending on what you want to test, type:
   tracert [server] 
telnet [server] [port] 
   Example: telnet mail.infomaniak.com 587 (allows you to test the SMTP port if your software/email client does not allow sending emails)…

… on Android

1. Use the application Simple Telnet Client which allows you to test very simply via 2 fields to fill in (for example mail.infomaniak.com and the port 143 or 993)…

Perform a PING

PING allows you to check if a machine is accessible via the Internet. You can also use this tool to ensure you are addressing the correct machine, for example during a DNS change, by checking the IP address obtained. It is possible to perform a ping on a domain name, a hostname or an IP address.