DNSSEC support on Netlify

Please add DNSSEC support.

For those who don’t know what DNSSEC is, please read this ICANN article “DNSSEC – What Is It and Why Is It Important?

It’s high time already. So many registrars, DNS management services support DNSSEC. And what’s more, NS1 the DNS provider backing Netlify DNS supports DNSSEC.

20 Likes

DNSSEC is definitely in our backlog. We’ll get there!

7 Likes

You can use Cloudflare with Netlify combined, it works for me, just don’t use Cloudflare’s proxy. You can still use some of the Cloudflare extras, I think. :slight_smile:

However.
Up until yesterday, I had perfect scores for both my zsoltsandor.me and my www.zsoltsandor.me at the internet.nl test. Today, www is not giving me a good score, apparently something had happened with NETLIFY’s DNSSEC, I can’t think of anything else.

The results for the zsoltsandor.me test:
https://en.internet.nl/site/zsoltsandor.me
The results for the www.zsoltsandor.me test:
https://en.internet.nl/site/www.zsoltsandor.me

Also some other tests:
https://dnssec-analyzer.verisignlabs.com/zsoltsandor.me
http://dnsviz.net/d/zsoltsandor.me/dnssec/
For the www:
https://dnssec-analyzer.verisignlabs.com/www.zsoltsandor.me
http://dnsviz.net/d/www.zsoltsandor.me/dnssec/

The problem seems to be on Netlify’s side:
https://dnssec-analyzer.verisignlabs.com/zsoltsandor.netlify.com
http://dnsviz.net/d/www.zsoltsandor.me/dnssec/
Results for Netlify itself:
https://dnssec-analyzer.verisignlabs.com/netlify.com
http://dnsviz.net/d/netlify.com/dnssec/

Could admins, service team, whomever look into this?
Thanks in advance! :slight_smile:

@zsoltsandor, please see the post above on August 7th:

DNSSEC is definitely in our backlog. We’ll get there!

We do not support DNSSEC at this time.

For those wondering, I just checked and the new netlify.app domain does not yet support DNSSEC. I was hoping this would be implemented along with the URL changes for Netlify sites, but apparently not.

Given that DNSSEC is pretty much the only way site owners have at the moment to protect their DNS records, this feature would be appreciated.

Hi, @SmashManiac, this feature request is still open. If/when DNSSEC is supported with our DNS service, we’ll post an update here to let you know about it.

I’m also waiting for this!

@zsoltsandor, any update yet?

Hi, @Shein. There has been no change on this. If there is an update, we will make a new post here to share the news.

Okie, thanks. Looking forwards to it!

1 Like