Domain Name System Security Extensions (DNSSEC) can provide you with digital signatures to verify the destination URLs to which your domain names are redirected. You can add DNSSEC records to a domain name to authenticate the Domain Name System (DNS) servers that host your domain name. This helps you avoid attacks such as DNS cache poisoning. This topic describes how to add DNSSEC records in and synchronize the DNSSEC records to the Alibaba Cloud Domains console.
Limits on DNSSEC configurations
- Supported types of domain names
Currently, Alibaba Cloud does not support DNSSEC for all domain names. Supported domain names include .com, .net, .cc, .tv, .name, .biz, and .club. The DNSSEC setting menu appears in the left-side navigation pane only for domain names that support DNSSEC.
- Domain name resolution
You can follow the procedure in this topic to configure and view DNSSEC of domain names that are not resolved by Alibaba Cloud DNS servers. For more information about how to configure DNSSEC for domain names that are resolved by Alibaba Cloud DNS servers, see Configure DNS Security Extensions.