DNSSEC improves the trust and integrity of DNS. Often referred to as the phone book of the Internet, DNS translates domain names into numeric Internet addresses. However, DNS is a fundamentally insecure protocol. It does not guarantee where DNS records come from, and it accepts any address given to it, no questions asked.
Cloudflare offers easy-to-use DNSSEC, and it only takes a few minutes to set up.
Universal DNSSEC is now available to all websites on Cloudflare, for free. We’ll do all the heavy lifting by signing your zone and managing the keys. Protecting your domain from DNS forgeries is just a few clicks away. All you need to do is enable DNSSEC in your Cloudflare dashboard and add one DNS record to your registrar.
Once your registrar publishes the DS record, your domain will be DNSSEC-enabled. You can verify your DNSSEC configuration with the third-party DNSViz tool.
Universal DNSSEC is designed to work seamlessly with all other Cloudflare security and performance features, including Universal SSL, a global CDN, and automatic web content optimization.
Set up a domain in less than 5 minutes. Keep your hosting provider. No code changes required.