The German company 1blu AG offers domain registration among other services.
Note: All of their web interface seems to be in German only. And communication with their support is probably best done in German as well.
Their own DNS service does not support DNSSEC. And it is rather basic w.r.t. supported record types.
Delegation to deSEC
Delegation of the nameservers is very easy in the web UI.
- Log in to their customer portal (Kundenservicebereich)
- Select “Meine Produkte” → Product name → “Domain”
- Click on the gear button next to the domain
- Click on the edit button (pencil) next to “DNS-Einstellungen”
- Switch to “Eigene Nameserver” and enter the deSEC nameservers (
ns1.desec.io,ns2.desec.org) - Click the “Übernehmen” button
- Wait … this can take a while …
Setting the DS records
There is no web UI or API for setting up DNSSEC.
Opening a support ticket is required for setting up the DS records on the parent domain.
For the .de TLD they require the following data (which you can get from the deSEC web interface using the “i” button next to the domain name — the data below is fictitious, used just to illustrate the format):
- Domainname: e.g.
example.de - Flags: e.g.
257 - Algorithmus: e.g.
ECDSA256 (13) - Public key: e.g.
b7nDfrgu3yTrKz+3hc7SrDWAIVm6PQjFoFPdJ8ktmMuh2cnWQUTtjfUxyKDXjkix94FvjrpBvBnZth3YqTG/pA==
(Required data for other TLDs is unknown to me.)
Note: Their 1st-level support may try to brush you off with replies such as “we don’t support DNSSEC”. But they do have a few people who are able to complete the request.