Hacker News Reader

Comment by tyingq | Hacker News Reader

I don't expect a lot of movement, given things like:

"If you want to configure DNSSEC for a domain that is registered with Route 53, you must use another DNS service provider"

View on HN

Yeah. It's extremely disappointing that AWS hasn't implemented DNSSEC in Route 53. Even more so, since they have actually been a target of an attack on Route 53, that would have been ineffective if DNSSEC had been enabled.

If you are buying a domain through Route 53, there is a good chance the purchase is actually being handled by Gandi[0]. Gandi supports DNSSEC[1] (it's literally a check box in the options, very simple) so you may as well skip buying the domain through Route 53 and get it directly from Gandi.

No affiliation with either company, just a happy customer of both.

  [0]https://aws.amazon.com/route53/domain-registration-agreement/
  [1]https://docs.gandi.net/en/domain_names/advanced_users/dnssec.html

Reply on news.ycombinator.com