The records behind every domain
A domain works only through its DNS: the name servers that answer for it and the records they publish. They decide where visitors land, which servers receive your email, and which services can prove they act for you. Managing them well, across every extension you hold, is the base of everything else you do with a domain.
What we manage
- Name servers for your domains, with the settings each registry requires. Some registries check the name servers before they accept a registration or a change.
- Records: the addresses of your websites and mail servers, aliases, and the text records used for email authentication and for the verification of online services.
- DNSSEC: the signature of your zones and the publication of the matching key at the registry.
Why DNSSEC matters
Without DNSSEC, a resolver has no way to tell a genuine answer from a forged one, and an attacker who can inject false answers can send your visitors or your email elsewhere. DNSSEC signs the records and links the signature to the registry of the extension, so that resolvers can verify it. Many registries support it, but not all, and the way to publish the key varies from one to the next.
How Domgate handles it
We provide NS records management for the domains you register with us, so that your domains and their DNS are handled in one place. We set up DNSSEC where the registry supports it and handle the key at the registry. When you change providers for your website or your email, we update the records so that the service keeps running.
What you provide
- The services the domain must point to: website, email, other platforms.
- Your choice to sign the zone with DNSSEC, where the extension allows it.
Who it is for
Companies that want their domains and their DNS in one place, registrars who want the same for their clients, and any holder of a restricted extension whose registry checks the name servers.
DNS and DNSSEC: frequent questions
Can I keep my current DNS provider?
Yes. A domain registered with Domgate can point to any name servers you choose. Our DNS management is an option, not a condition.
Do all extensions support DNSSEC?
No. Many registries support it, but not all, and the way to publish the key differs between those that do. We tell you, extension by extension, what is possible.
Why would a registry check my name servers?
Some country code registries test the name servers of a domain before they accept its registration or a change, and refuse servers that are not set up correctly. With our DNS management, the servers are prepared for the rules of each registry.
