Using DNSSEC with deSEC and IONOS

Managed DNS Hosting
3

Hi fiwswe,

thanks for the description. Definitely knowledge that was missing.

Based on your explanation and the linked specifications, it seems to be feasible to choose digest type 2 (SHA-256). The algorithm is 13 (ECDSAP256SHA256) in any case.

This results in the following info the provider IONOS is asking for:

Domain: example.org
Digest: 5dada2fd4a27e590253… (last value in second row at DS RECORDS)
Digest Type: 2 (SHA-256)
Algorithm: 13 (ECDSAP256SHA256)
Public Key: r4xEqxwzZgsD7W… (last value at DNSKEY RECORDS)
Key Tag: 12345 (first value in second row at DS RECORDS)

All information can be retrieved at deSEC’s web API by clicking next to the domain name on the info button.

Thanks again and hopefully someone else will find this information useful as well.

I’ll update this thread, if everything works fine an DESEC tests will be successful.

Regards
Sebastian