DNSSEC - Security - NIC Liechtenstein

<!DOCTYPE html> <html lang="en"> <head> <title>DNSSEC - Security - NIC Liechtenstein</title> <link rel="stylesheet" type="text/css" href="/export/system/modules/ch.SWITCH.ocms.www/resources/css/slim.css" /> <link rel="stylesheet" type="text/css" href="/export/system/modules/ch.SWITCH.ocms.subsite/resources/css/sub.css" /><link rel="stylesheet" type="text/css" media="all" href="/export/sites/nicli/styles.css" /> <script src="/export/system/modules/ch.SWITCH.ocms.subsite/resources/js-slim/sub-slim.js" type="text/javascript" ></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta charset="UTF-8"> <link rel="shortcut icon" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/favicon.ico" type="image/x-icon" /> <link rel="apple-touch-icon" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon.png" /> <link rel="apple-touch-icon" sizes="57x57" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-57x57.png" /> <link rel="apple-touch-icon" sizes="72x72" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-72x72.png" /> <link rel="apple-touch-icon" sizes="76x76" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-76x76.png" /> <link rel="apple-touch-icon" sizes="114x114" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-114x114.png" /> <link rel="apple-touch-icon" sizes="120x120" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-120x120.png" /> <link rel="apple-touch-icon" sizes="144x144" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-144x144.png" /> <link rel="apple-touch-icon" sizes="152x152" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-152x152.png" /> </head> <body> <div class="container"> <div class="swi-subsite-logo-container"> <a href="https://www.switch.ch/en/"><img height="46" width="180" src="/export/system/modules/ch.SWITCH.ocms.www/resources/images/logoHi.png" alt=""></a>  <ul class="nav nav-pills pull-right swi-nav-pills-app-meta hidden-xs"> <li class="dropdown"> <a href="#" class="dropdown-toggle" data-toggle="dropdown">EN <span class="swi-link-caret"></span></a> <ul class="dropdown-menu"> <li><a href="/de/security/dnssec/">DE</a></li> </ul> </li> </ul>  </div> <nav class="navbar navbar-default swi-navbar-subsite" role="navigation"> <div class="container-fluid">  <div class="navbar-header"> <button type="button" class="navbar-toggle" data-toggle="collapse" data-target="#bs-example-navbar-collapse-1"> <span class="sr-only">Toggle navigation</span> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="navbar-brand" href="/">NIC Liechtenstein</a> </div>  <div class="collapse navbar-collapse" id="bs-example-navbar-collapse-1"> <ul class="nav navbar-nav"> <li class=" "> <a href="/whois/">Lookup</a> </li> <li class=" "> <a href="/registrars/">Registrars</a> </li> <li class=" "> <a href="/terms/">Legal Info</a> </li> <li class="active "> <a href="/security/">Security</a> </li> <li class=" "> <a href="/support/">Support</a> </li> <li class=" "> <a href="/statistics/">Statistics</a> </li> <li class=" "> <a href="/about/">About Us</a> </li> <li class="dropdown visible-xs"> <a href="#" class="dropdown-toggle" data-toggle="dropdown">EN <span class="swi-link-caret"></span></a> <ul class="dropdown-menu"> <li><a href="/de/security/dnssec/">DE</a></li> </ul> </li> </ul> </div> </div> </nav> </div> <div id="jumbotron" > <div>  <div class="jumbotron swi-jumbotron swi-jumbotron-bright-text swi-jumbotron-www swi-jumbotron-noimg"> <div class="container swi-jumbotron-content"> <div class="swi-inner"> <h1 >DNSSEC</h1> </div> </div> </div></div> </div> <div class="container swi-container"> <div class="row"> <div class="col-xs-12 col-sm-8"> <div class="swi-tree visible-xs"> <ul> <li><a href="/security/">Security</a></li> <li><a href="/security/malware/">Secure Websites</a></li> <li><a href="/security/resilience/">DNS Resilience Programme</a></li> <li class="active"><a href="/security/dnssec/">DNSSEC</a> <ul> <li><a href="/security/dnssec/details/">DNSSEC in Detail</a></li> </ul></li> <li><a href="/security/cds/">CDS Status Check</a></li> <li><a href="/security/dns_health/">DNS Health Report</a></li> <li><a href="/security/lock/">Registry Lock</a> </li> </ul> </div> <div id="content" ><div> <div ><p>DNSSEC is an extension of the Domain Name System (DNS) that serves to guarantee the authenticity and integrity of data from DNS responses.</p> <p>DNSSEC uses cryptographic signatures to ensure that any manipulation of DNS responses does not go unnoticed, enabling data to be published securely on the DNS. Virtually every transaction on the internet begins with a DNS request, whether it's accessing a website, sending an email, instant messaging, or online banking. DNSSEC prevents a connection from being redirected to the wrong server via fraudulent DNS responses.</p> <p>DNSSEC is also the basis for other security mechanisms. For example, <a href="https://de.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities">DANE</a> makes it possible to send encrypted emails to the correct destination server without involving a third party (certificate authority). In combination with technologies such as TLS, internet transactions are secured on multiple levels.</p></div></div> <div> <div ><p><a href="/security/dnssec/details/">More information on how the DNS and DNSSEC work</a></p></div></div> <div> <div class="panel-group acc-v2" id="accordion-3b90fa8d-dba2-11e5-89b1-525400a7a801"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="accordion-toggle" data-toggle="collapse" data-parent="#accordion-3b90fa8d-dba2-11e5-89b1-525400a7a801" href="#collapse-3b90fa8d-dba2-11e5-89b1-525400a7a801-1"> Why is DNSSEC needed? </a> </h4> </div> <div id="collapse-3b90fa8d-dba2-11e5-89b1-525400a7a801-1" class="panel-collapse collapse" style="height: auto;"> <div class="panel-body" ><div> <div ><p>Online communication predominantly uses the DNS to look up information. As the DNS protocol dates back to the beginning of the internet, however, the design did not take security aspects into account. DNSSEC secures an otherwise unprotected DNS protocol, thereby improving the security of overall online communication.</p></div></div> </div> </div> </div> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="accordion-toggle" data-toggle="collapse" data-parent="#accordion-3b90fa8d-dba2-11e5-89b1-525400a7a801" href="#collapse-3b90fa8d-dba2-11e5-89b1-525400a7a801-2"> What do I need in order to use DNSSEC? </a> </h4> </div> <div id="collapse-3b90fa8d-dba2-11e5-89b1-525400a7a801-2" class="panel-collapse collapse" style="height: 0px;"> <div class="panel-body" ><div> <div ><p>As an internet user you do not need to do anything. If your internet access provider supports DNSSEC, then all the checks on the signatures will be made on your provider's DNS servers.</p> <p>If you as the holder would like to protect your domain name with DNSSEC, the operator of the name servers has to set this up for you. If the name servers are operated by your webhosting provider, please contact them. If your company operates their own name servers please contact your internal IT department.</p></div></div> </div> </div> </div> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="accordion-toggle" data-toggle="collapse" data-parent="#accordion-3b90fa8d-dba2-11e5-89b1-525400a7a801" href="#collapse-3b90fa8d-dba2-11e5-89b1-525400a7a801-3"> How many .li domain names are already DNSSEC-signed? </a> </h4> </div> <div id="collapse-3b90fa8d-dba2-11e5-89b1-525400a7a801-3" class="panel-collapse collapse" style="height: 0px;"> <div class="panel-body" ><div> <div ><p>The chart shows the number of DNSSEC-signed .li domain names on the first of each month since Switch introduced DNSSEC in 2010.</p> <p><a href="/statistics/dnssec/">Number of .li domain names with DNSSEC</a></p></div></div> </div> </div> </div> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="accordion-toggle" data-toggle="collapse" data-parent="#accordion-3b90fa8d-dba2-11e5-89b1-525400a7a801" href="#collapse-3b90fa8d-dba2-11e5-89b1-525400a7a801-4"> Key Management Practice Statement </a> </h4> </div> <div id="collapse-3b90fa8d-dba2-11e5-89b1-525400a7a801-4" class="panel-collapse collapse" style="height: 0px;"> <div class="panel-body" ><div> <div ><p>The "Key Management Practice Statement" document describes how Switch handles the cryptographic key material associated with DNSSEC. It explains how the keys are generated and saved and when they lose their validity.</p> <p><strong><a href="/export/shared/.content/files/SWITCH_DNSSEC_KMPS.pdf">Key Management Practice Statement</a></strong></p></div></div> </div> </div> </div> </div> </div></div> </div> <div class="col-xs-12 col-sm-4 swi-subsite-sidebar"> <div class="swi-tree hidden-xs"> <ul> <li><a href="/security/">Security</a></li> <li><a href="/security/malware/">Secure Websites</a></li> <li><a href="/security/resilience/">DNS Resilience Programme</a></li> <li class="active"><a href="/security/dnssec/">DNSSEC</a> <ul> <li><a href="/security/dnssec/details/">DNSSEC in Detail</a></li> </ul></li> <li><a href="/security/cds/">CDS Status Check</a></li> <li><a href="/security/dns_health/">DNS Health Report</a></li> <li><a href="/security/lock/">Registry Lock</a> </li> </ul> </div> <div id="context" > <div>  <div class="swi-sidebar-box swi-sidebar-box-grey"> <div class="swi-inner"> <div><h3 >Registrars for .li</h3></div> <div ><p><strong>Registering new .li domain names:</strong> Please select a registrar. <br /><strong>Already registered domain names: </strong>Please contact the registrar administering your domain name for any changes.</p></div> <a class="noicon btn btn-default swi-btn" href="/registrars/">List of all Registrars</a> </div> </div> </div> <div>  <div class="swi-sidebar-box swi-sidebar-box-grey"> <div class="swi-inner"> <div><h3 >Domain Name Lookup</h3></div> <div ><p>Is the domain name you want still available?</p> <p>Who is the registrar of your domain name?</p></div> <a class="noicon btn btn-default swi-btn" href="/whois/">Domain Name Lookup</a> </div> </div> </div> </div> </div> </div> </div> <footer class="swi-footer-bottom swi-footer-bottom-subsite hidden-print"> <div class="container clearfix"> <div class="swi-footer-breadcrumb pull-left"> <ol class="breadcrumb"> <li><a href="/about/disclaimer/">Legal notice</a></li> <li><a href="/about/imprint/">Imprint</a></li> </ol> </div> <div class="swi-footer-copyright-subsite pull-right"> © 2025 for content at Switch </div> </div> </footer>  <script type="text/javascript"> var _paq = _paq || []; _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u=(("https:" == document.location.protocol) ? "https" : "http") + "://www.switch.ch/tracker/"; _paq.push(['setTrackerUrl', u+'piwik.php']); _paq.push(['setSiteId', 9]); var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.type='text/javascript'; g.defer=true; g.async=true; g.src=u+'piwik.js'; s.parentNode.insertBefore(g,s); })(); </script> <noscript><p><img src="https://www.switch.ch/tracker/piwik.php?idsite=9" style="border:0;" alt="" /></p></noscript>  </body> </html>

CINXE.COM

DNSSEC - Security - NIC Liechtenstein