logoalt Hacker News

traceroute66yesterday at 6:08 PM3 repliesview on HN

> We found deSEC to be the only affordable DNS supplier in the EU that complies with state of the art secure DNSSEC.

I mean, if your definition of "affordable" is free, then sure.

But for the record there are other affordable EU suppliers who do DNSSEC:

    - Bunny DNS[0] is "free" – i.e. only subject to their minimum $1/month account spend fee.
    - RcodeZero is very affordable[1] plus added bonus it is run by the `.at` registry so the infrastructure is solid – business customers only, no private individuals
    - Netnod (only via resellers[2] unless you are a big company or government) – Netnod host the I Root Servers and their public hosting DNSSEC service will soon feature HSM-bound DNSSEC keys
[0] https://bunny.net/dns/ [1] https://www.rcodezero.at/solutions/enterprise [2] https://www.netnod.se/dns/find-a-partner

Replies

quicksilver03yesterday at 6:57 PM

I happen to run an affordable EU supplier who does DNSSEC, and also AXFR (incoming and outgoing). I offer a free plan from time to time, but not at the moment to preserve resources for paying customer.

https://www.ptrdns.net/

show 1 reply
Stitch4223yesterday at 9:56 PM

We have a support ticket at Bunny that has been open for months precisely because they don’t provide state-of-the-art DNSSEC. We had to move to another provider, as we have a deadline to comply with at the end of this month. I don’t know what the issue is off the top of my head.

Netnod.se uses a DNSKEY that is too small on their main domain.

Rcodezero.at might indeed be something. Thanks.

We donate to deSEC, so it’s not free for us.

show 1 reply
amaccuishyesterday at 6:51 PM

One who doesn't is frustratingly Hetzner.