Skip to content

DNS Providers with DANE Support

Alain Wolf edited this page Sep 14, 2018 · 2 revisions

DNS providers often just support a subset of the DNS record types. Additionally, for the certificates to be validated by DANE, the domain needs to be signed and trusted with DNSSEC.

Also to be useful for a fully automated solution, they have to provide access trough an API.

Here is a list of DNS providers who support DNSSEC and let you manage TLSA records trough their API:

Provider DNSSEC Support TLSA Support API
Cloudflare Yes Yes Yes
EasyDNS Yes Yes Yes
Gandi Yes Yes Yes
OVH Yes Yes Yes
Google Cloud DNS Yes Yes Yes
Rage 4 Yes Yes Yes

See also this list from heise.de in german and focused on german providers. - Last updated: April 2017

Clone this wiki locally