Plesk Extensions > Admin-Ahead Current Plesk Extensions
Admin-Ahead Plesk DNSSEC Extension
(1/1)
Ragner Correia:
Admin-Ahead Plesk DNSSEC Extension is DNSSEC made easy. Domain Name Security Extensions (DNSSEC) add an extra layer of security to your domain names by attaching digital signatures to their DNS information. DNSSEC addresses an identified security risk and helps prevent malicious activities like cache poisoning, pharming, and man-in-the-middle attacks. It uses a digital signature to create a chain of authority. Then, it uses the chain to verify that the source domain name, which the DNS resolver returns, matches the DNS record stored at the authoritative DNS. If it cannot validate the source, it discards the response. To enable DNSSEC you must digitally create private and public keys and generate a Declaration of Signing record during the domain name signing process. The General Zone Signing Process involves:
- Generate a zone signing key.
- Generate a key signing key.
- Sign the zone and generate signed zone records.
- Generate the declaration of signing (DS) record.
Everyone realises that it's a great idea, but implementation requires effort, consensus, and expenses (often significant). Admin-Ahead Plesk DNSSEC Extension is the only available extension for Plesk that is built with a robust algorithm to help you through the above processes and manage the digital keys over a GUI.
Features
* Sign/Un-sign/Re-sign a single zone.
* Sign/Unsign multiple zones.
* Automatically resigns zones when changes are detected.
* Automatically resign every zone periodically before key expires.
* 24/7 Support from Admin-Ahead Team via Chat and Tickets.
Compatibilities and Dependencies
Supported OS: Centos 6 & 7 , RHEL 6 &7
Supported Plesk versions: Plesk 12 and above
Supported nameserver: Bind
Version 2.4.4
-Plesk 12.5 compatible
-Minor Bug fixes
Version 2.0.3
-Minor Bug fixes
Version 2.0
-Support for automatic pushing of signed zone records to slave DNS servers setup using the following Parallels provided extension:
Slave DNS Manager
-Reworked signing/unsigning algorithm.
Navigation
[0] Message Index
Go to full version