Expanding DNSSEC Adoption
Sep 18, 2018Sergi Isasi, Vicky Shrestha
Summary
This post announces the General Availability and full support for CDS and CDNSKEY records for all Cloudflare managed domains that enable DNSSEC. This allows for setting up DNSSEC without requiring users to log in to their registrar to upload a DS record, automating the process of provisioning and managing DS records. It also details how parent registries can scan for and utilize these records, and encourages industry adoption of RFC8078.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available