DNSSEC

.uk

At a glance

  • DNSSEC relies on a chain of trust within the DNS infrastructure emanating from the root through to individual zones
  • The chain of trust has been extended to .uk second level domains. Registrars can complete the chain of trust through to individual domain names by generating a DNSSEC key and corresponding DS record​

DNSSEC relies on a chain of trust within the DNS infrastructure emanating from the root through to individual zones. Background information about DNSSEC, digital signatures and the chain of trust is provided in our introduction to DNSSEC.

Signing .uk domain names

Our registry systems are enabled to accept DS records. This allows registrars to complete the chain of trust through to individual domain names by generating a DNSSEC key and corresponding DS record. Our systems can be used to place the DS record into the parent zone. The DNSSEC key will also need to be published onto the registrar’s nameserver record for that domain name. Further information on using DNSSEC registry systems is available here.