We found deSEC to be the only affordable DNS supplier in the EU that complies with state of the art secure DNSSEC. Highly recommended.

▲ dsl 3 hours ago | parent | next [-]

DNSSEC support is an anti-feature, it is dead/dying and the faster we can unburden ourselves from it the faster we can move on to better solutions.

https://sockpuppet.org/blog/2015/01/15/against-dnssec/

	▲	teddyh an hour ago \| parent \| next [-]
		Rebuttal: <https://easydns.com/blog/2015/08/06/for-dnssec/>
	▲	Stitch4223 15 minutes ago \| parent \| prev \| next [-]
		Such as? And do those solve the same thing? The post lists 8 headlines why it should be abolished.
	▲	apefulsin 3 hours ago \| parent \| prev [-]
		So DNS should be open to MITM attackers?

▲ traceroute66 3 hours ago | parent | prev [-]

> We found deSEC to be the only affordable DNS supplier in the EU that complies with state of the art secure DNSSEC.

I mean, if your definition of "affordable" is free, then sure.

But for the record there are other affordable EU suppliers who do DNSSEC:

    - Bunny DNS[0] is "free" – i.e. only subject to their minimum $1/month account spend fee.
    - RcodeZero is very affordable[1] plus added bonus it is run by the `.at` registry so the infrastructure is solid – business customers only, no private individuals
    - Netnod (only via resellers[2] unless you are a big company or government) – Netnod host the I Root Servers and their public hosting DNSSEC service will soon feature HSM-bound DNSSEC keys

[0] https://bunny.net/dns/ [1] https://www.rcodezero.at/solutions/enterprise [2] https://www.netnod.se/dns/find-a-partner

▲

quicksilver03 3 hours ago | parent | next [-]

I happen to run an affordable EU supplier who does DNSSEC, and also AXFR (incoming and outgoing). I offer a free plan from time to time, but not at the moment to preserve resources for paying customer.

https://www.ptrdns.net/

	▲	andreaso an hour ago \| parent [-]
		Are you aware that the child zone A(AAAA) records for danube.ns.ptrdns.net differs from the parent zone A(AAA) glue records for danube.ns.ptrdns.net? Looks like it's the glue records that point to the actual server?

▲

amaccuish 3 hours ago | parent | prev [-]

One who doesn't is frustratingly Hetzner.