Gandi Wiki


You are on a question's page

Domain Names at Gandi.net
reopened

Question "How do I enable DNSSEC?", by Phillip V.

As announced by Dave Knight from Afilias, .ORG is DNSSEC-signed since 2009-06-02.

How do I enable DNSSEC so that my domain under .ORG can be signed?

References:

http://www.pir.org/dnssec

http://www.mail-archive.com/nanog@nanog.org/msg12238.html

Answer, by Eric M.

Replying to this threat in the hope of actually getting an answer from Gandi.

Answer, by Simon V.

Another request on this issue.

Answer, by Justin Y.

Also interested!

Answer, by Philippe B.

Me too, for the .CH

Answer, by Justin Y.

Answer, by Henry H.

PIR just posted a list of 13 registrars that can handle DNSSEC registrations. Sadly Gandi isn't on the list.

http://www.pir.org/get/registrars?order=field_dnssec_value&sort=desc

Answer, by Barry I.

Also very keen, would rather not have to move some of my domains to another registrar to get DNSSEC support.

Answer, by Markus W.

Another request on this issue. @Gandi, please respond!

Answer, by Stephane G.

Same here. Waiting for an official word concerning this (and more importantly, an implementation)

Answer, by Ryan A. (Gandi)

Hello everyone,

Gandi will be adding DNSSEC support in early 2011. We will make an announcement when we go live with it so you will know when it's available.

Follow-up, by Alex C.

Is there a manual process that can be used in the meantime (such as speaking to Gandi support)?

Follow-up, by Patrick V.

Just in case, I am also interested for my .eu domains. This is becoming a pressing issue. I would hate to have to switch registrars because of that. Thanks.

Follow-up, by Ryan A. (Gandi)

We are not ready to manually implement DNSSEC, however it is nearly ready for production now. You can follow our progress at http://www.gandibar.net/post/2010/08/25/What-you-can-expect-this-fall

Follow-up, by Henry H.

2011-04-07: Any progress reports for DNSSEC DS-record registrations?

Follow-up, by Mike K.

2011-05-10: Another request for some progress. With DNSSEC now enabled for .com the fact that GANDI doesn't support it is going to be turning into a showstopper for some.

Follow-up, by Matt D.

2011-06-30: All .uk zones now have DNSSEC and DS record upload using the automaton. This is becoming a priority as DLV is going to stop working for most of us now that the parent zone has been signed and more and more people drop the DLV trust anchor.

Follow-up, by Jon B.

2011-07-10: Ryan A. (Gandi) - thanks for your prior status updates, where are things at today?

Follow-up, by Michael M. (Gandi)

We are hoping to get this out sometime in September: http://www.gandibar.net/post/2010/08/25/What-you-can-expect-this-fall#c182739

Follow-up, by Matthias O.

Any news about this?

Follow-up, by Josh G.

Maybe they meant September 2012, since this September is nearly over and they haven't even signed gandi.net yet.

Follow-up, by Markus W.

  • Fall 2010 failed
  • early 2011 failed
  • early in September failed

It's getting ridiculous …

Follow-up, by Nicolas C. (Gandi)

I can understand that DNSSEC is a key feature missing. For one I'm missing it on my domain zone. DNSSEC is on our internal planning which was a little reorganized due to simple hosting and some emergency maintenance.

We will keep you informed on the status of DNSSEC in Gandi.

Follow-up, by Andy F.

Its all becoming quite frustrating. I've been with Gandi for well over 10 years now and chose them as they were flexible, primarily focused on DNS and outside the USA. Recently GANDI appears to be losing this focus and concentrating more on hosting and related services.

I've been waiting for DNSSEC to be implemented and seen it being repeatably delayed and now there isn't any date being offered for implementation in registered .COM I'm being asked about DNSSEC and I can't say when it will be supported.

Come on guys, when will it be available? DNSSEC is rapidly becoming 'not' optional.

Follow-up, by Håkan L.

I've just now initiated transfers for my domains so I soon won't have to worry about this mess anymore.

My suggestion to Gandi would be to pay a little more attention to what used to be your core business.

Follow-up, by John N.

We're still interested in DNSSEC!

Follow-up, by Andreas B.

Bump

Follow-up, by Vincent D.

Also waiting for this feature…

Follow-up, by Barry I.

January 2012 ,and still nothing. sadly this is getting to be a serious showstopper. New registrations are needing to go elsewhere until this is resolved.

Follow-up, by Michael M.

2012-Jan-13, there are now 40 other registrars on the PIR list (link above) that support DNSSEC. Sadly, I will have to leave gandi.net. I want to make use of the feature now as all the TLDs my zones live in are signed and have been for a while.

Last modified: 13 Jan 2012 at 11:12 by Michael M.