DNSSEC stands for Domain Name System Security Extensions.
It adds an extra layer of security to DNS by protecting against DNS spoofing and manipulation.

DNSSEC helps ensure that visitors are directed to the correct and authentic server.

What DNSSEC Does #

DNSSEC:

• Verifies the authenticity of DNS responses
• Prevents DNS cache poisoning
• Protects against redirection attacks
• Increases trust in domain resolution

DNSSEC does not encrypt website traffic.
SSL/TLS is used for encryption.

How DNSSEC Works (High Level) #

DNSSEC works by:

• Digitally signing DNS records
• Allowing resolvers to verify those signatures
• Rejecting invalid or tampered DNS responses

This process is automatic and invisible to visitors.

DNSSEC at ProRedLine #

At ProRedLine:

• DNSSEC is enabled by default
• DNSSEC is managed by ProRedLine
• Customers cannot modify DNSSEC settings

DNSSEC remains active as long as:

• The domain is registered through ProRedLine
• There is an active subscription associated with the domain

Domain Manager is included by default for all domains registered at ProRedLine.

Why Customers Cannot Manage DNSSEC #

DNSSEC management is restricted to:

• Prevent misconfiguration
• Maintain DNS integrity
• Avoid validation failures
• Ensure consistent security

Incorrect DNSSEC configuration can cause domains to stop resolving entirely.

When DNSSEC Is Active #

DNSSEC is active when:

• The domain uses ProRedLine DNS
• The domain is not delegated to external nameservers

If nameservers are changed externally, DNSSEC may no longer function.

What DNSSEC Does Not Do #

DNSSEC does not:

• Replace SSL/TLS
• Protect website content
• Block attacks on websites or email
• Improve website performance

DNSSEC only protects DNS resolution.

Common Misunderstandings #

• DNSSEC is optional at ProRedLine, but enabled by default
• DNSSEC cannot be disabled by customers
• DNSSEC does not affect website design or content

DNSSEC runs automatically in the background.

Responsibility Notice #

You are responsible for:

• Keeping the domain active
• Maintaining an active subscription
• Not attempting unsupported DNSSEC changes

ProRedLine manages DNSSEC on your behalf.