Domain Name System Security Extensions (DNSSEC)
The domain name system (DNS) translates domain names into numeric Internet addresses. However, DNS is a fundamentally insecure protocol. It does not guarantee where DNS records come from and accepts any requests given to it.
creates a secure layer to the domain name system by adding cryptographic signatures to DNS records. By doing so, your request can check the signature to verify that the record you need comes from the authoritative nameserver and was not altered along the way.
Enable or disable DNSSEC
Cloudflare Registrar offers one-click DNSSEC activation for free to all customers:
- Log in to the , and select your account.
- Select Domain Registration > Manage Domains.
- Find the domain you where you want to activate DNSSEC and select Manage.
- Select Configuration > Enable DNSSEC. If DNSSEC was previously activated, select Disable DNSSEC to disable it.
Cloudflare publishes delegation signer (DS) records in the form of for a domain delegated to Cloudflare. Cloudflare Registrar scans those records at regular intervals, and gathers those details and sends them to your domain’s registry.
This process can take one to two days after you first enable DNSSEC.