[Dnssec-deployment] Domain registrars with easy DNSSEC interface?

[Dan York]

Bill,


On Jan 17, 2012, at 8:55 AM, Bill Owens wrote:

> I think you're overloading the term 'registrar' in this case - the registrar function is to handle the registration of the domain name, and that's it. You're looking for someone who offers hosted DNS services with DNSSEC signing capabilities.

Yep, you are quite correct that I'm not differentiating between a registrar registering the domain name and a company providing DNS hosting.    Primarily because I'm looking at it more from a *consumer* point-of-view, and at that lower level of technical sophistication, they don't necessarily know (or care about) the difference.  They just want to buy a domain and manage it.  Many (most?) of the consumer-oriented registrars don't make the distinction.

> I can see how it would be much more convenient having the same organization offer both registrar and DNS hosting services, since it allows the user to be out of the loop for installation of the DS record,

Exactly.  For someone who has recently heard of DNSSEC and wants to "sign their domain", a combined registrar/DNS host can make it simple.

> but your use of 'registrar' is probably what's causing people to suggest GKG, Gandi, etc.

Perhaps... and also the fact that many people simply don't understand what DNSSEC is all about, and so they see that a registrar mentions "DNSSEC support" and assumes that is all that's needed.

> All that said, I personally don't use DNS hosting so that capability isn't something I've been looking for. I have seen the recent twitter traffic about signed zones in .se and .cz, though I don't know whether the companies behind those services will offer them in other countries and TLDs. . .

Yes, I was wondering about that myself and have it in my queue to investigate.  Thanks for the suggestion.

Thanks,
Dan

--
Dan York
Senior Content Strategist, Internet Society
york at isoc.org   +1-802-735-1624 
Jabber: york at jabber.isoc.org 
Skype: danyork   http://twitter.com/danyork

http://www.internetsociety.org/deploy360/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://dnssec-deployment.org/pipermail/dnssec-deployment/attachments/20120117/e099e298/attachment-0001.html