Secure domains (DNSSEC)

What is DNSSEC?

DNSSEC allows individuals who visit a website or receive e-mails to be sure that the website or e-mail comes from the stated sender.

In other words, DNSSEC makes domains more secure, and using DNSSEC for your domain name can be seen as a service for those individuals who visit your website.

How can I obtain DNSSEC?

You can obtain DNSSEC from your web hotel or your name server operator, provided that your operator offers the service and its name server supports DNSSEC.

Although your web hotel is normally responsible for key management, you are naturally able to take care of this yourself if you have your own name servers. This can be done in the DomainManager, where you publish DNSSEC keys.

While .SE Direkt offers DNSSEC free of charge, name server operators may charge for the service.

Using DNSSEC

Domain name registrants administer and publish DNSSEC keys themselves through the DomainManager. This means that customers who use DNSSEC also assume responsibility for administering their DNSSEC keys and using them to sign their own DNS data, assuming they choose not to have a technical contact handle this work on their behalf.

Preventing attacks against DNS queries

DNSSEC makes it easier for Internet users to ensure that they are actually connected to the correct bank or store and not with an imposter. This reduces the risk of being defrauded, for example, when conducting bank transactions or shopping online.

It is important to note that DNSSEC does not stop all types of fraudulent activity. It is only designed to prevent attacks in which the attackers manipulate responses to DNS queries for their own gain.

Heavily trafficked websites

One target group for DNSSEC is individuals who operate heavily trafficked websites and websites that may be of commercial or ideological interest for attackers who wish to reroute visitors to their own website. For this category of users, DNSSEC plays a key role in the work to offer visitors a safe and secure Internet environment.

Register a domain