Admin-Ahead Plesk DNSSEC Extension is DNSSEC made easy. Domain Name Security Extensions (DNSSEC) add an extra layer of security to your domain names by attaching digital signatures to their DNS information. DNSSEC addresses an identified security risk and helps prevent malicious activities like cache poisoning, pharming, and man-in-the-middle attacks. It uses a digital signature to create a chain of authority. Then, it uses the chain to verify that the source domain name, which the DNS resolver returns, matches the DNS record stored at the authoritative DNS. If it cannot validate the source, it discards the response.
To enable DNSSEC you must digitally create private and public keys and generate a Declaration of Signing record during the domain name signing process. The General Zone Signing Process involves :
Generate a zone signing key.
Generate a key signing key.
Sign the zone and generate signed zone records.
Generate the declaration of signing (DS) record.
Everyone realizes that it's a great idea, but implementation requires effort, consensus, and expenses (often significant).
Admin-Ahead Plesk DNSSEC Extension is the only available extension for Plesk that is built with a robust algorithm to help you through the above processes and manage the digital keys over a GUI.