DNSSEC
All authoritative DNS server must use DNSSEC.
The Domain Name System Security Extensions (DNSSEC) are a suite of extension specifications by the Internet Engineering Task Force (IETF) for securing data exchanged in the Domain Name System (DNS) in Internet Protocol (IP) networks. The protocol provides cryptographic authentication of data, authenticated denial of existence, and data integrity. based on
The nameserver provider establishes DNSSEC. Normally they provide the necessary information like
- DS Record and
- public key
They need to be announced to the registrar by your domain provider.
You can validate your DNSSEC settings with DNSSEC Analyser.