What is DNSSEC?
DNSSEC (Domain Name System Security Extensions) is an additional security feature for the Domain Name System (DNS).
In simple terms, DNS is what directs visitors from your domain name (such as example.com) to the correct website or email server. DNSSEC adds a layer of verification to help ensure those DNS records haven't been altered or impersonated.
DNSSEC does not encrypt your website, replace an SSL certificate, or improve website speed. Its purpose is simply to help verify that DNS information is authentic.
Understanding the Different Services
One of the most common points of confusion is that your domain name, DNS and website hosting are often provided by different companies.
For example:
Your Domain Name
│
├── Domain Registration
│ GM-Innovations
│
├── DNS Hosting
│ Cloudflare
│
└── Website Hosting
GoDaddy
Or everything may be provided by the same company:
Your Domain Name
│
├── Domain Registration → GM-Innovations
├── DNS Hosting → GM-Innovations
└── Website Hosting → GM-Innovations
Although these services work together, they are separate. DNSSEC is configured where your DNS is hosted, not necessarily where your domain name was registered.
How Do I Know Who Hosts My DNS?
If you're unsure who manages your DNS, you can use an online DNS lookup tool to identify your domain's nameservers.
One commonly used option is:
• MXToolbox DNS Lookup
Enter your domain name and look for the Nameservers listed in the results. These will often identify the company hosting your DNS (for example Cloudflare, GoDaddy, Squarespace, Microsoft or another provider).
If you're still unsure, feel free to contact us with your domain name and we'll help you determine whether your DNS is hosted with GM-Innovations or another provider.
Setting Up DNSSEC
The steps required depend entirely on where your DNS is hosted.
Where are your DNS records hosted?
│
├── GM-Innovations
│ ↓
│ Contact our support team.
│ We'll assist with enabling DNSSEC.
│
└── Another Provider
↓
Contact your DNS provider
or web developer.
Every DNS provider has a different process for enabling DNSSEC, so you'll need to follow the instructions provided by the company hosting your DNS.
In many cases, enabling DNSSEC is simply a matter of turning the feature on. Some providers may also generate a DS (Delegation Signer) record, which links your domain registration to the signed DNS zone.
If Your Domain Is Registered Through GM-Innovations
If your DNS provider asks you to add or update a DS record at your domain registrar, please contact us.
Where supported, we'll be happy to assist with updating the domain registration using the information supplied by your DNS provider.
Frequently Asked Questions
Is DNSSEC required?
No. Most websites operate perfectly without DNSSEC. It is generally enabled when recommended by your DNS provider, web host, or organisational security policy.
Does DNSSEC replace an SSL certificate?
No.
SSL/TLS certificates encrypt the connection between your website and visitors.
DNSSEC verifies that your DNS records are authentic.
These are different technologies that perform different roles.
Can enabling DNSSEC break my website?
Yes, if it is configured incorrectly.
For this reason, DNSSEC should only be enabled when your DNS provider supports it and the required configuration steps have been completed correctly.
I registered my domain through GM-Innovations. Why can't you enable DNSSEC?
Your domain registration and your DNS hosting may be managed by different companies.
If your DNS is hosted by another provider, only that provider has access to enable DNSSEC for your DNS zone. GM-Innovations can assist with matters relating to your domain registration where applicable, while your DNS provider is responsible for the DNS configuration itself.
