What is DNSSEC
DNSSEC is the abbreviation for 'Domain Name System Security Extensions'. It is a set of extensions to the domain name system (DNS), basically to allow clients to verify the authenticity and integrity of DNS records.
For a domain to make use of DNSSEC, the following is needed:
- the domain type (TLD) needs to support DNSSEC (i.e. the registry)
- the registrar of the domain needs to allow to 'activate' and configure DNSSEC for a domain
- the configured nameservers need to support DNSSEC
- the clients (e.g. browsers) need to make use of DNSSEC
You may have a look at Wikipedia or this short tutorial as starters for reading more about these topics.
DNSSEC Support at Joker.com
Joker.com enables you to 'activate' and configure DNSSEC for nearly all of your domains - most domain types (TLDs) do support DNSSEC. The only exceptions at Joker.com currently are .ws and .cn.
Please note: Joker.com supports DNSSEC with standard Joker.com name servers as well as with domains that use external name servers.
1) for Joker.com nameservers: To enable DNSSEC, please go to "My Domains" and click on "DNS". There you will find the "Enable DNSSEC" button. If you then click on "Save changes", you are done!
2) for DNSSEC with own or external name servers: Please use our instructions Step-By-Step: How To use DNSSEC with a Joker.com Domain and a DNS Hosting Provider
To find out if your domain is working properly with DNSSEC, you may use the DNSSEC Analyzer.
Resellers will find similar commands to operate DNSSEC using DMAPI and RPanel.