DNSSEC

DNSSEC signs the domain's records and protects visitors from forged DNS answers. It only works with our DNS.

Enable it

1. Open Domains → domain name → DNSSEC.
2. Click Enable DNSSEC. The status becomes Being prepared: we generate the keys and publish them with the registry, usually within a few minutes.
3. When the status is Active, the records are signed.

To turn it off click Disable DNSSEC.

Before switching to another provider's nameservers, disable DNSSEC: otherwise the domain may stop working until the keys are removed from the registry.

Some extensions don't support DNSSEC: the tab tells you.