deSEC – Free Secure DNS

(desec.io)

27 points | by gurjeet 3 hours ago ago

11 comments

  • awill 11 minutes ago

    I signed up and saw they only allowed a single subdomain for DDNS, with docs saying to contact support if you needed more. I emailed asking for just 1 more subdomain and support told me that for my usecase I should just use CloudFlare.

    So I did. No silly miniscule restrictions.

  • aequitas 20 minutes ago

    Recently migrated to deSEC, great experience so far, except for hitting the API rate limit when using Tofu to plan and apply changes with around a 100 domains. For now I'm using `-parallelism=1` which seems to work.

  • anonymousiam 12 minutes ago

    Seems legit, but how can I trust them to survive if they're not collecting revenue?

    • bflesch a minute ago

      Some of them are located in Virginia, don't worry they'll be funded forever.

  • Stitch4223 an hour ago

    We found deSEC to be the only affordable DNS supplier in the EU that complies with state of the art secure DNSSEC. Highly recommended.

    • traceroute66 12 minutes ago

      > We found deSEC to be the only affordable DNS supplier in the EU that complies with state of the art secure DNSSEC.

      I mean, if your definition of "affordable" is free, then sure.

      But for the record there are other affordable EU suppliers who do DNSSEC:

          - Bunny DNS is "free" – i.e. only subject to their minimum $1/month account spend fee.
          - RcodeZero is very affordable[1] plus added bonus it is run by the `.at` registry so the infrastructure is solid – business customers only, no private individuals
          - Netnod (only via resellers[2] unless you are a big company or government) – Netnod host the I Root Servers and their public hosting DNSSEC service will soon feature HSM-bound DNSSEC keys
      
      [1] https://www.rcodezero.at/solutions/enterprise [2] https://www.netnod.se/dns/find-a-partner
  • cyberax an hour ago

    Does not support AXFR :(

  • ak4153 39 minutes ago

    Just use unbound

    • 0l 37 minutes ago

      Completely different thing

      • thesuitonym 16 minutes ago

        What is this if not a DNS service?