DNSSEC (The Domain Name System Security Extensions) establishes a chain of trust from the root key which signed by ICANN (.) and down through each key. Given DNSSEC is enabled and an ETH address is put into the subdomain of the domain you own (eg:
_ens.yourdomain.tld), ENS manager allows anyone to submit the hash of the chain to
DNSSEC Oracle smart contract
Note: Currently only
.xyzdomain is supported. For other domains, please refer to the FAQ section.
When you first land on ENS manager, you will see something like below.
If your DNS provider already supports DNSSEC-signed domains, all you do is to enable the option on the DNS manager.
Whatever provider you need, make sure you select RSA signatures and SHA256 hashing.
The DNS Registrar on ENS looks for a TXT record with a specific name and format in order to verify what Ethereum address should be given ownership of the domain. To claim ownership of mydomain.xyz, create a TXT record in your DNS zone, _ens.mydomain.xyz, with text data of the form a=0x1234..., where 0x1234... is the Ethereum address you want to give control of the ENS record to.
Once you get to this stage, you can complete the rest from ENS manager. Simply press "Register" and send the transaction.
Technically speaking, over 90% of domains can be supported. Some tlds (
.kred) are operated by each DNS registry.
You may be confused with short name reservation process. Under DNSSEC integration, you can only claim for the correspondent ENS name with the same top level domain (TLD).
.eth is managed completely separately.
.eth permanent registrar, there is no notion of
registrant which can transfer the ownership of the controller. If you want to transfer the ownership to any address other than currently registered address, please update the corresponding DNS record from your DNS manager and click "Transfer" from our ENS manager.
We currently haven't enabled the ability to delete the ownership. Having said that, you can achieve the same effect if you set the owner record to
a= 0x0000000000000000000000000000000000000000 then click "Transfer" from the ENS manager.
No. DNSSEC registration is only enabled for the second level domain (eg: yourname.xyz). If you want to create
subdomain.yourname.xyz, then click "Subdomains" tab of our manager and create it from ENS manager just like other subdomains under