To start off with, what is DNSSEC? The Domain Name System Security Extensions (DNSSEC) is a suite of specifications for securing information provided by the Domain Name System (DNS) as used by the Internet. DNS, in its original form, is inherently insecure and DNSSEC seeks to resolve these vulnerabilities through the use of encryption and other, security-minded methods. That said, it is not easy to setup and requires an IT professional to configure and get working.
GekkoFyre Networks is beginning to receive some requests from its clients as to whether we support DNSSEC or not and the short of it is; no, we do not. Whilst most of our infrastructure might be fully prepared for it along with the wholesaler we use for the domain names that we sell through the main site, it all comes down to a specific feature of which we make use of within cPanel/WHM called ‘DNS Clustering‘. This particular part of cPanel/WHM breaks the chain-of-trust in DNSSEC simply due to the fact that it does not support that area of the IETF specifications, despite outcries from many users. There is an outstanding feature request that calls for the implementation of DNSSEC support within this area of cPanel/WHM and according to what the company has told GekkoFyre Networks recently, they will not be implementing it anytime soon.
We are currently looking at alternative methods of supporting DNSSEC currently and we might’ve found just the ticket, although it will take some weeks and maybe even a month or two to implement. So please, stay tuned!
In other news, DNS Flag Day is coming up fast! On this day the IETF along with software vendors around the world will be rolling out the EDNS specification for all up-to-date domain name servers. Suffice to say, GekkoFyre Networks is 100% compliant and totally committed to meeting February 1st, 2019, with success! For any of our clients whom wish to receive more details when testing their websites and/or DNS servers for compatibility and compliance, you only need to go as far as the Internet Systems Consortium page. You will be greeted with a form where you may enter your website’s details which will then let you know whether you are up to specification or not.
If you have any questions or problems regarding the content discussed in this article then please, create a ticket with our technical support staff who will get to you as soon as possible. Alternatively, you may join our Official Discord Server where one of our staff or even a friendly regular will help you with your issue.