What is DNSSEC?
DNSSEC adds a digital signature to your DNS answers so visitors' computers can tell they have not been faked.
DNSSEC (Domain Name System Security Extensions) adds digital signatures to DNS records. When it is on, a computer looking up your domain can check that the answer really came from your DNS host and was not changed along the way. It needs two matching parts: signing turned on at your DNS host, and a matching record called a DS record at your registrar. If those two parts stop matching, many visitors cannot reach your domain at all.
Why it matters for your business: DNSSEC protects against forged DNS answers, but it must be turned off or updated before changing DNS hosts. A leftover setting is a common cause of a site and email going down after a move.
Related articles
More in Glossary
Still need help?
Ask our team