1000 FAQs, 500 tutorials and explanatory videos. Here, there are only solutions!
Secure Web traffic with DNSSEC
This guide explains what DNSSEC is and how this protection enhances the safety of Areas At Infomaniak and the traffic they generate.
Preamble
- Each URL corresponds to an IP address, and when an Internet user enters your website's URL address in his or her web browser, he or she uses a DNS server whose role is to redirect it to the IP address that corresponds to the domain entered (technically speaking, DNS resolution).
- When DNSSEC is not enabled on your domain name, a malicious person could detect a fault in a DNS server and change the correspondence between your domain name and the IP address of your site by the IP of their choice. In such a case, the Internet user who would enter the URL address of your site would then be returned to another website that would not correspond to the content of your website.
- DNSSEC makes it possible to secure the authenticity of the response provided by the DNS server and thus guarantees users that they are viewing the website they really want to see. If a hacker tried to change the IP address of your domain name in a DNSSEC-protected DNS server at the time of resolution, DNSSEC would refuse its requests because they would not be authenticated.
- DNSSEC is therefore additional security to the SSL certificate of a site DNSSEC guarantees the internet user to visit the site that corresponds to the URL entered, and the SSL certificate then comes in to encrypt the exchanges between the internet browser and the web server of the site he is visiting.
Enable DNSSEC
To know the availability of DNSSEC for a particular domain, please refer to the specifics of the extensions that concern you since this page (under Frequently Asked Questions by first clicking on the extension concerned).
DNSSEC is available and already activated to the purchase for the vast majority of domain name extensions.
If necessary, DNSSEC activates with a few clicks on the domain names fully managed at Infomaniak:
- Click here in order to access the management of your product on the Manager Infomaniak (Need help?).
- Click directly on the nameallocated to the product concerned.
- Enable DNSSEC from the Scoreboard of the field:
If the DNS area of your domain is managed by another registrar, it will be necessary to provide technical information provided by the registrar. If the information is incorrect, your domain name will no longer be accessible It is therefore recommended that: transfer the complete management of your domain to Infomaniak before you activate DNSSEC if you are not familiar with these manipulations.
Check if DNSSEC is enabled
The propagation of DNSSEC to the registry may take several hours before it is effective.
Enter the domain name to check on this site of analysis.