What is DNSSEC?

DNSSEC, or Domain Name System Security Extensions, is an Internet security protocol that helps reduce the chance that visitors to your  website are led to fake webpage if they type your web address, protected with DNSSEC technology, into their browser.

How it works

When you look up a domain name, or URL, this process involves a set of questions and answers whenever your browser issues a request to find the website it is looking for. But can your browser trust the answer it receives? How does it know the answer hasn't been modified by a third party?

With DNSSEC, browsers and name servers can check whether the answers they receive are authentic. This means that there is a smaller chance that Internet users can be redirected to ill-intentioned websites.

DNSSEC works by checking answers at each level of the Internet infrastructure, called the Domain Name System, or DNS. Each level of the infrastructure vouches for the level above through what is known as a "chain of trust".

Please note that not all registrars currently offer this service.

What is "Registry Lock"

The Registry Lock Service provides added protection to those domain names that benefit from this status. This service can be used to provide a greater level of safety for domain names. It is intended to mitigate against the potential for unintended changes, deletions or transfers. With the Registry Lock Service, you can take advantage of the greatest level of security for your most valuable and highly visible domain names.

To take advantage of Registry Lock, please contact your registrar, who will be able to confirm whether they offer this type of service. You can search the list of accredited registrars by language, country, or service.

DNSQuality Score

The DNSQuality score is a feature developed by EURid. It is a visual reflection of the quality of the DNS (Domain Name System) setup of a given domain name.

EURid performs weekly, technical checks on every active domain name, calculating a new DNSQuality Score each week via a sequence of tests. These tests are performed for every domain name which has at least one linked name server and an ‘In Use’ status. Each test conducted allocates a certain number of points, and the total number of points is calculated into a DNSQuality score expressed as a percentage. Tests include:

  • Whether a domain name is reachable over IPv4 and IPv6;
  • Whether all of the name servers linked to the domain name are responsive;
  • Whether the domain name is enabled with the ‘Domain Name Security Extensions’ (DNSSEC).

Domain name holders can look-up the DNSQuality scores of domain names which they have registered via their ‘My .eu’ account.

Why is it so important that the DNS is configured correctly?
  • So that the services linked to your domain names will always be reachable (i.e. website, email address);
  • So that the services linked to your domain names will function with higher security.

For a full list of the tests, and for more information about the DNSQuality Score, please refer to the ‘My .eu’ manual.