DNSSEC

DNS Security Extensions (DNSSEC) adds an extra layer of authentication to DNS, ensuring requests are not routed to a spoofed domain.

For additional background on DNSSEC, visit the Cloudflare Learning Center ↗.

When you enable DNSSEC, Cloudflare signs your zone, publishes your public signing keys, and generates your DS record.

Note:

Cloudflare automatically adds DS records for domains using Cloudflare Registrar or those using .ch and .cz top-level domains.