Search code examples
dnscloudflarednssec

To enable DNSSEC is it required to have namesevers set to the domain registrar?


In order to enable DNSSEC, is it required to have namesevers set to the domain registrar?

I would like to enable DNSSEC, but my domain registrar doesn't allow me to, unless the nameservers are set to theirs. The problem is that I am using Cloudflare and nameservers are pointing to those of Cloudflare.

enter image description here


Solution

  • Technically speaking, you can keep your nameservers pointed to Cloudflare and still enable DNSSEC. However, it is possible that your specific registrar has a policy of not allowing this.

    Cloudflare has a guide explaining how to enable with many of the most popular registrars. https://support.cloudflare.com/hc/en-us/articles/360006660072

    If your registrar has confirmed that you must use their nameservers to enable DNSSEC, there is not much you can do except for complain to them or switch registrars.