Deploy360 Domain Name System Security Extensions (DNSSEC) Adds Support For DNSSEC DS Records

Gandi netOn Friday we learned that is joining the ranks of domain name registrars supporting DNSSEC. In a blog post on their “Gandi Bar” site, “Thomas” outlines the level of support is providing and points over to a wiki post explaining in more detail how to set up DNSSEC for your domains.

It’s important to note that is not providing DNSSEC-signing services – and in fact you cannot use’s own DNS servers for hosting your DNS as their hosting servers do not provide DNSSEC support yet. However, if you host your DNS records on a service that does support DNSSEC, can handle all the relevant Delegation Signer (DS) records for you. We previously provided a step-by-step example of configuring DNSSEC in this manner using It seems that works in a similar manner although it appears you provide them with your full public key and they then generate the relevant DS records.

What is nice to see is that supports a wide range of top-level domains (TLDs), including:

  • .be
  • .biz
  • .com
  • .de
  • .eu
  • .fr (+ .re, .yt, .pm, .wf, .tf)
  • .net
  • .se
  • .us

Further, in their blog post they commit to providing support for even more TLDs in the future. ¬†Given that ICANN’s list of DNSSEC-enabled registrars only lists a few registrars supporting multiple TLDs, this news out of is great to see.

We’ve queued them up to add to our list of tutorials for signing your domain with DNSSEC using domain name registrars and look forward to seeing more DNSSEC-signed domains coming out of customers.

P.S. Have you signed your domain today?