DNSSEC

What is DNSSEC?

DNSSEC is a type of security network for the Internet. Normally, the DNS (Domain Name System) ensures that when you visit a website such as www.domain.com, your computer knows which server to access. DNSSEC ensures that the information on the way to you cannot be changed or falsified.  

DNSSEC therefore ensures that the data your computer receives is actually the correct data and that no one tries to direct you to a false or insecure page.  

Why do you need DNSSEC?

Imagine you enter a website address and someone manages to redirect this request - suddenly you end up on a fake site that may be dangerous or look like the real one in order to steal your data. DNSSEC protects against this.  

DNSSEC ensures that your website visitors actually arrive at your site and not at a fake site. It therefore makes surfing and using your domain more secure.  

What exactly does DNSSEC do?

DNSSEC ensures that:  

• The data is genuine: This means that the information really comes from your server.  

• The data remains unchanged: No one can manipulate the DNS data on its way to the user.  

Without DNSSEC, there is a risk of hackers redirecting traffic and leading users to dangerous or fake websites.  

What are the advantages of DNSSEC?

• More security for your domain: With DNSSEC, you protect your website and its visitors from attacks in which hackers could manipulate and redirect data traffic.  
• User confidence: Your visitors can feel safer knowing that their connection to your website is protected and that they will not be redirected to a fake site.  

How does DNSSEC work?

DNSSEC adds a digital signature to your DNS data, confirming that the data is genuine and unaltered. This way, everyone who accesses your website knows that the data is secure and comes from the right source.  

DNSSEC with Hoststar

Hoststar automatically enables DNSSEC for all .CH and .LI top-level domains configured with our name server entries to ensure the security of our customers and their websites. If DNSSEC is to be deactivated, an e-mail must be sent to our support team from the contact address provided.