Site Map  |  Site Index  |  Quick Links 
        Search 

DNSSEC

DNSSEC Root Deployment

Status

DNSSEC Deployed on 107 out of 317 TLDs [+]

Map of DNSSEC TLDs [+]

Deploying DNSSEC

DNSSEC KSK Key Ceremony

Publications

Technical

How DNSSEC Works

DNSSEC Applications

DNSSEC Standards [+]

DNSSEC Core
RFC 4033 DNS Security Introduction and Requirements
RFC 4034 Resource Records for the DNS Security Extensions
RFC 4035 Protocol Modifications for the DNS Security Extensions

Additional DNSSEC RFCs
RFC 4470 Minimally Covering NSEC Records and DNSSEC On-line Signing
RFC 4641 DNSSEC Operational Practices
RFC 5155 DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
RFC 6014 Cryptographic Algorithm Identifier Allocation for DNSSEC

Sample DNSSEC Application RFC
RFC 4398 Storing Certificates in the Domain Name System (DNS)

DNSSEC Tools [+]

DNSSEC Training [+]

Contact ICANN for DNSSEC Training

TLDs supporting DNSSEC

भारतIndia
gn.Guinea
yt.Mayotte
テストtest
рфRussian Federation
ไทยThailand
مليسياMalaysia
台灣Taiwan
台湾Taiwan
إختبارtest
δοκιμήtest
பரிட்சைtest
آزمایشیtest
測試test
טעסטtest
테스트test
испытаниеtest
한국Korea, Republic of
परीक्षाtest
测试test
wf.Wallis and Futuna
us.United States
uk.United Kingdom
ug.Uganda
ua.Ukraine
tz.Tanzania, United Republic of
tw.Taiwan
tv.Tuvalu
tt.Trinidad and Tobago
tm.Turkmenistan
th.Thailand
tf.French Southern Territories
sx.Sint Maarten (Dutch part)
su.Soviet Union (being phased out)
si.Slovenia
sh.Saint Helena, Ascension and Tristan da Cunha
se.Sweden
sc.Seychelles
ru.Russian Federation
re.Reunion
pw.Palau
pt.Portugal
pr.Puerto Rico
post.Universal Postal Union
pm.Saint Pierre and Miquelon
pl.Poland
org.Generic top-level domain
nz.New Zealand
nu.Niue
nl.Netherlands
nf.Norfolk Island
net.Generic top-level domain
nc.New Caledonia
na.Namibia
my.Malaysia
museum.Reserved for museums
mn.Mongolia
mm.Myanmar
mil.Reserved exclusively for the United States Military
me.Montenegro
lv.Latvia
lu.Luxembourg
lt.Lithuania
lk.Sri Lanka
li.Liechtenstein
lc.Saint Lucia
lb.Lebanon
la.Lao People's Democratic Republic
kr.Korea, Republic of
kg.Kyrgyzstan
jp.Japan
io.British Indian Ocean Territory
info.Generic top-level domain
in.India
nf.Norfolk Island
ไทยThailand
cx.Christmas Island
tv.Tuvalu
lt.Lithuania
tz.Tanzania, United Republic of
ca.Canada
ru.Russian Federation
pw.Palau
рфRussian Federation
cc.Cocos (Keeling) Islands
hn.Honduras
مليسياMalaysia
fo.Faroe Islands
tt.Trinidad and Tobago
lv.Latvia
post.Universal Postal Union
mil.Reserved exclusively for the United States Military
한국Korea, Republic of
lb.Lebanon
ua.Ukraine
cr.Costa Rica
nz.New Zealand
pl.Poland
at.Austria
si.Slovenia
nz.New Zealand
sx.Sint Maarten (Dutch part)
mm.Myanmar
kr.Korea, Republic of
ug.Uganda
台灣Taiwan
台湾Taiwan
tw.Taiwan
su.Soviet Union (being phased out)
gl.Greenland
nc.New Caledonia
測試test
de.Germany
sh.Saint Helena, Ascension and Tristan da Cunha
io.British Indian Ocean Territory
ac.Ascension Island
cl.Chile
com.Generic top-level domain
co.Colombia
lu.Luxembourg
am.Armenia
kg.Kyrgyzstan
la.Lao People's Democratic Republic
ag.Antigua and Barbuda
gr.Greece
jp.Japan
net.Generic top-level domain
my.Malaysia
wf.Wallis and Futuna
arpa.Reserved exclusively to support operationally-critical infrastructural identifier spaces as advised by the Internet Architecture Board
me.Montenegro
in.India
asia.Restricted to the Pan-Asia and Asia Pacific community
sc.Seychelles
nl.Netherlands
fi.Finland
mn.Mongolia
gi.Gibraltar
lc.Saint Lucia
gov.Reserved exclusively for the United States Government
hn.Honduras
bz.Belize
fr.France
re.Reunion
nu.Niue
th.Thailand
pr.Puerto Rico
yt.Mayotte
pt.Portugal
li.Liechtenstein
tf.French Southern Territories
be.Belgium
info.Generic top-level domain
eu.European Union
se.Sweden
pm.Saint Pierre and Miquelon
ch.Switzerland
テストtest
إختبارtest
δοκιμήtest
பரிட்சைtest
آزمایشیtest
測試test
טעסטtest
테스트test
испытаниеtest
परीक्षाtest
测试test
us.United States
museum.Reserved for museums
biz.Restricted for Business
edu.Reserved for post-secondary institutions accredited by an agency on the U.S. Department of Education's list of Nationally Recognized Accrediting Agencies
dk.Denmark
org.Generic top-level domain
lk.Sri Lanka
na.Namibia
bg.Bulgaria
cat.Reserved for the Catalan linguistic and cultural community
tm.Turkmenistan
cz.Czech Republic
uk.United Kingdom
br.Brazil

Deploying DNSSEC

Registrars that support end user DNSSEC management, including entry of DS records

Last updated: 26 Mar 2012
Registrar Accepts DS records for Notes
Binero (SE) .se, .eu All domains are automatically signed. (1) (2)
DK-Hostmaster (DK) A list of DNSSEC DS supported domains could not be located on the site.
DYN (US) .org, .se (1) (2)
Frobbit! (SE) .se (1) (2)
GKG (US) .net, .us, .biz, .org Also supports DS record entries for domains you may host elsewhere. (2)
Gandi SAS (FR) .org, .me.uk, .org.uk, .co.uk, .be, .biz, .com, .de, .eu, .fr, .pm, .re, .tf, .wt, .yt, .net, .se, .us (2)
GoDaddy (US) .com, .net, .biz, .us, .org, .eu, .se, .co.uk, .me.uk, .org.uk, .co, .com.co, .net.co, .nom.co Also supports DS record entries for domains you may host elsewhere. (1) (2)
NAME (US) .us, .org, .biz (2)
NIC Chile (CL) .cl (2)
NamesBeyond (US) .org (1) (2)
OVH (FR) .com, .net, .eu (1)(2)
Registro (BR) .br (1) (2)
SinnerG (NL) .be, .com, .de, .net, .org, .se (1)
Notes: (1) Provides DNSSEC signing services. (2) UI supports DNSSEC.

The list does not constitute an endorsement of any particular registrar. This is being provided for informational purposes to track the adoption of DNSSEC and provide information for users who may have questions about which registrars support DNSSEC.
If your registrar currently accepts DS records, please send an email with subject "DNSSEC REGISTRAR UPDATE" and body containing company name, country location, URL, what TLDs you accept DS records for, whether your Web interface supports DS records, whether you provide DNSSEC signing services to dnssec@icann.org and the Security team will add your registrar to this DNSSEC page.
See ISOC's comprehensive DNSSEC registrar site for HowTos and more information.

Is DNSSEC supported at my Top Level Domain?
A list of Top Level Domains (TLDs) that support DNSSEC are at the right starting with the TLD most recently deploying DNSSEC. This means these TLDs are technically capable of supporting DNSSEC. If you see a TLD listed here that isn't supported by the registrars above it could mean there is no automated way to enter DS records yet, you may need to do it manually by emailing in your DS records to a support contact.

How do I know if the site I am connecting to supports DNSSEC?
While we don't endorse or vouch for any of the tools or applications below, here is a short list of DNSSEC enabled browser plugins:

Name Browser(s) Notes
DNSSEC Validator FireFox
DNSSEC Validator Chrome

How do I debug problems?

  • DNSViz A DNS Visualization Tool - Sandia National Labs
  • DNS Check The Internet Infrastructure Foundation
  • DNSSEC Analyzer DNSSEC Debugging Tool - Verisign Labs

Where do I learn more?

This web page is designed to track activities relating to DNSSEC. For more information on DNSSEC and interest in DNSSEC education and training please contact dnssec@icann.org.

About

FAQs

IANA

Mission

Structure

News

Announcements

Blog

Newsletter

News Releases

RSS Feeds

Policy

Policy Update

At-Large

ASO

ccNSO

GAC

GNSO

RSSAC

SSAC

 

In Focus

Affirmation of Commitments

Contractual Compliance

DNSSEC

Fellowship Program

Internationalized Domain Names (IDNs)

IDN ccTLD Fast Track Process

IPv6

New gTLD Program

Resources

Accredited Registrars

Dispute Resolution Options

E-Learning

Photos

Videos

Speeches and Presentations

Whois Search

Governance Documents

Articles of Incorporation

Bylaws

Board Meeting Minutes and Resolutions

Board Code of Conduct

Board Conflicts of Interest Policy

Summary of Board Statements of Interest

General Documents

Meetings

Press Room

Careers

Contact

This file last modified 8-Jun-2013

© 2013 Internet Corporation For Assigned Names and Numbers