What is DNSSEC?

xneelo does not currently support DNSSEC

Before transferring your domain to us, ask your current hosting provider to disable DNSSEC. This helps prevent downtime on your website(s) and email once the transfer is complete.

Every website has an IP address – a long identification number that computers use to find a website. Long numbers are hard for people to remember, so websites also have domain names. A special system, the Domain Name System (DNS), translates these names into numbers.

Unfortunately, it’s possible to interfere with this system. Wrongdoers and hackers can misdirect people trying to reach your site, or they can even intercept your mail. DNS Security Extensions, commonly known as DNSSEC, help prevent this from happening by authenticating DNS response data.

DNSSEC provides an extra level of security as the web browser checks to ensure the DNS information is correct and was not modified.


  • How does DNSSEC work?

    DNSSEC adds digital signatures to your DNS records. This allows your browser to check whether the DNS information it receives is genuine or has been tampered with. Attackers don’t have the private key used to create these signatures, so they can’t successfully forge DNS responses.





  • Why xneelo doesn’t offer DNSSEC

    At xneelo, keeping your domains secure and reliable is a top priority. While DNSSEC does add an extra layer of protection, it also brings technical challenges that may cause downtime.

    Here’s why we don’t offer DNSSEC:

    • Compatibility challenges: For DNSSEC to work, every link in the DNS chain, including your Registrar, DNS host and website, must support it. If one part fails or is misconfigured, your site can go offline.
    • Customer experience: Many of our customers manage DNS across different platforms (e.g., third-party DNS providers, CDNs, or Registrars). Implementing DNSSEC in these mixed environments can be complex, and we want to make sure we can support it without adding unnecessary confusion and risk.
    • Safety first: We want to ensure that if and when DNSSEC is offered, we have robust monitoring, automation, and recovery procedures in place to keep your domain online.





  • How we protect your DNS

    While xneelo doesn’t offer DNSSEC, we already follow proven best practices to protect your DNS and hosting environment, including:

    • Anycast DNS with geographic redundancy for higher resilience.
    • Access-controlled DNS management tools to prevent unauthorised changes.
    • Active monitoring to detect unusual DNS behaviour early.

    We continue to evaluate DNSSEC and track industry adoption closely. Our goal is to introduce it only when we can ensure a stable, well-supported, and low-risk experience for all customers.





  • What to do if you require DNSSEC

    If you require DNSSEC, you can use a third-party domain Registrar or DNS host that supports it, while continuing to host your website with xneelo. Please note that you’ll be responsible for setting up and managing the DNSSEC configuration with your chosen provider.



Assist Note

Let’s Encrypt TSL/SSL certificates are included and pre-installed on all xneelo hosting packages.