Security, privacy and speed of deSEC compared to standard name servers

Hello, I have been thinking a little about deSEC …

Will I have more privacy and security if I put my domain on deSEC’s nameservers? Will my DNS records for my domain be published globally more quickly if I use deSEC?

If I understand correctly, if I use deSEC I will have to change some DNSSEC settings and more at my domain provider. But doesn’t that mean that I am giving two providers control over my domain administration?

Am I thinking wrong? I’m still not completely familiar with domains and DNS and I’m still learning a lot…

Compared to what?
How fast your DNS will be published (or what you probably mean is how fast it can be changed) is mostly based on TTL.

No.
deSEC will become your DNS server, while you keep your domain registrar. You simply add DS or DNSKEY you get from deSEC to your registrar to enable DNSSEC.

Compared to my current name server provided by the domain registrar. My provider-supplied name server takes a good 2 hours to publish a DNS record. How about deSEC? Does that make a difference? Will my DNS records be published faster? I am not talking about TTL.

OK, thank you very much.

DNS updates currently take a few seconds on average; 99% of updates are published globally within 70s.

Best,
Nils

4 Likes

That’s good to know. Thank you very much!