Dns Sec
Posted: Sat Jan 09, 2016 9:19 am
Anyone have a decent guide to doing this with vesta?
Guide? Nope, but you have DNSKEY and IPSECKEY records.
Afaik, the registrar where you registered your domain must support DNSSEC. Specifically, they need to be able to accept and sign Delegation Signer (DS) records that contain the necessary information about the keys used to sign your DNS zone. They also need to be able to provide these DS records to the parent domain (which is typically a TLD).
Registrars that support end user DNSSEC management, including entry of DS records:
https://www.icann.org/resources/pages/d ... 2-02-25-en