{"id":5712,"date":"2026-08-15T19:05:37","date_gmt":"2026-08-15T18:05:37","guid":{"rendered":"https:\/\/www.uk-cheapest.co.uk\/support\/?p=5712"},"modified":"2026-08-15T19:05:37","modified_gmt":"2026-08-15T18:05:37","slug":"what-is-dnssec-and-how-do-i-manage-ds-records","status":"publish","type":"post","link":"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/","title":{"rendered":"What Is DNSSEC and How Do I Manage DS Records?"},"content":{"rendered":"\n<div class=\"ukc-organic-guide\">\n<section class=\"ukc-organic-hero\" aria-labelledby=\"dnssec-answer\"><p class=\"ukc-organic-kicker\">DNSSEC for .UK domains<\/p><h2 id=\"dnssec-answer\">DNSSEC helps prove that DNS answers are authentic<\/h2><p class=\"ukc-organic-lead\"><strong>DNSSEC digitally signs DNS data so compatible networks can detect altered or forged answers.<\/strong> It does not encrypt website traffic or replace an SSL certificate. For eligible .UK domains, UKC lets the account owner publish and manage the exact DS records supplied by the DNS provider that signs the domain.<\/p><div class=\"ukc-organic-actions\"><a class=\"ukc-organic-button\" href=\"https:\/\/billing.uk-cheapest.co.uk\/clientarea.php?action=domains\" data-ukc-organic-cta=\"top\" data-ukc-organic-destination=\"client_area\">Manage My .UK Domains<\/a><a class=\"ukc-organic-text-link\" href=\"#dnssec-how\">See how DNSSEC works<\/a><\/div><div class=\"ukc-organic-facts\"><article><span>PROTECTS<\/span><strong>DNS authenticity<\/strong><small>Detects changed answers<\/small><\/article><article><span>REQUIRES<\/span><strong>A signed DNS zone<\/strong><small>Your DNS provider creates the keys<\/small><\/article><article><span>CONNECTS<\/span><strong>A DS record at Nominet<\/strong><small>Completes the chain of trust<\/small><\/article><\/div><\/section>\n<nav class=\"ukc-organic-nav\" aria-label=\"On this page\"><strong>On this page<\/strong><a href=\"#dnssec-how\">How it works<\/a><a href=\"#dnssec-who\">Who should use it<\/a><a href=\"#dnssec-add\">Add a DS record<\/a><a href=\"#dnssec-change\">Change or remove records<\/a><a href=\"#dnssec-questions\">Questions<\/a><\/nav>\n<aside class=\"ukc-organic-warning\"><strong>Do not add a DS record until the DNS provider is already signing the domain and has supplied all four values.<\/strong> An incorrect or stale DS record can cause DNSSEC-validating networks to stop reaching the website or delivering email. If you are unsure, leave the records unchanged and ask your DNS provider or UKC Support.<\/aside>\n\n<h2 id=\"dnssec-how\">How does DNSSEC work?<\/h2>\n<p>Normal DNS translates names such as yourdomain.co.uk into the addresses used by websites and email. DNSSEC adds digital signatures that allow a validating resolver to check that a DNS answer came from the expected source and was not changed in transit.<\/p>\n<div class=\"ukc-organic-grid two\"><article class=\"ukc-organic-card\"><h3>1. Your DNS provider signs the zone<\/h3><p>The provider hosting your DNS creates and maintains cryptographic keys, then signs the domain&#8217;s DNS records.<\/p><\/article><article class=\"ukc-organic-card\"><h3>2. The provider supplies DS values<\/h3><p>It gives you a key tag, algorithm, digest type and digest that identify the signed key.<\/p><\/article><article class=\"ukc-organic-card\"><h3>3. You publish the DS at Nominet<\/h3><p>For an eligible UKC-managed .UK domain, enter those exact values in the Client Area. UKC sends the DS record to the .UK registry.<\/p><\/article><article class=\"ukc-organic-card\"><h3>4. Resolvers validate the chain<\/h3><p>Compatible resolvers follow the signed chain from the .UK parent zone to your domain and reject answers that fail validation.<\/p><\/article><\/div>\n<aside class=\"ukc-organic-note\"><strong>DNSSEC authenticates DNS data but does not make it private.<\/strong> HTTPS and SSL encrypt website traffic. Secure mail settings protect email connections. These controls solve different problems and work together.<\/aside>\n\n<h2 id=\"dnssec-who\">Who should use DNSSEC?<\/h2>\n<p>DNSSEC is useful when the DNS provider actively supports zone signing and can supply and maintain the correct DS information.<\/p>\n<div class=\"ukc-organic-grid two\"><article class=\"ukc-organic-card\"><h3>Consider using it<\/h3><p>Your business relies on its domain, your DNS provider supports DNSSEC and you want stronger protection against forged DNS answers.<\/p><\/article><article class=\"ukc-organic-card\"><h3>Good for managed DNS<\/h3><p>Your specialist DNS provider signs the zone, displays the DS values and gives clear instructions for key changes.<\/p><\/article><article class=\"ukc-organic-card\"><h3>Use it with a maintenance plan<\/h3><p>You or your provider can coordinate nameserver changes, DNS provider moves and key rollovers without leaving a stale DS record.<\/p><\/article><article class=\"ukc-organic-card\"><h3>Do not enable it blindly<\/h3><p>Do not invent DS values or add them before the DNS zone is signed. If the provider does not offer DNSSEC, there is nothing valid to publish.<\/p><\/article><\/div>\n\n<h2>What does DNSSEC protect?<\/h2>\n<div class=\"ukc-organic-table-wrap\" role=\"region\" aria-label=\"What DNSSEC does and does not protect\" tabindex=\"0\"><table class=\"ukc-organic-table\"><thead><tr><th scope=\"col\">Security need<\/th><th scope=\"col\">Does DNSSEC help?<\/th><th scope=\"col\">What else is needed?<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">Detect forged or altered DNS answers<\/th><td>Yes<\/td><td>The DNS zone must be signed and the DS record must be correct<\/td><\/tr><tr><th scope=\"row\">Prove DNS data came from the expected signed zone<\/th><td>Yes<\/td><td>A validating resolver must perform the checks<\/td><\/tr><tr><th scope=\"row\">Encrypt website traffic<\/th><td>No<\/td><td>Use HTTPS with a valid SSL certificate<\/td><\/tr><tr><th scope=\"row\">Encrypt email connections<\/th><td>No<\/td><td>Use the secure IMAP and SMTP settings supplied for the mailbox<\/td><\/tr><tr><th scope=\"row\">Remove malware or secure a compromised website<\/th><td>No<\/td><td>Use website security, updates, backups and malware protection<\/td><\/tr><\/tbody><\/table><\/div>\n\n<h2 id=\"dnssec-add\">How do I add a DS record in the UKC Client Area?<\/h2>\n<p>The DNS provider that signs your zone must give you the values first. Copy them exactly and do not convert or shorten the digest.<\/p>\n<ol class=\"ukc-organic-steps two\"><li><span>1<\/span><div><strong>Enable signing at the DNS provider<\/strong><p>Follow the provider&#8217;s DNSSEC setup. Wait until it confirms that the domain&#8217;s DNS zone is signed and shows the DS record.<\/p><\/div><\/li><li><span>2<\/span><div><strong>Open DNSSEC Setup<\/strong><p>Sign in to the UKC Client Area, open My Domains, choose the eligible .UK domain and select DNSSEC Setup.<\/p><\/div><\/li><li><span>3<\/span><div><strong>Copy all four values exactly<\/strong><p>Enter the key tag, algorithm, digest type and digest supplied by the DNS provider. Review every character before continuing.<\/p><\/div><\/li><li><span>4<\/span><div><strong>Confirm and verify<\/strong><p>Review the proposed registry change, type the domain when asked and submit it. Reopen the tab to confirm the DS record shown by Nominet matches the provider.<\/p><\/div><\/li><\/ol>\n\n<h2>What are the four DS record fields?<\/h2>\n<div class=\"ukc-organic-table-wrap\" role=\"region\" aria-label=\"DS record fields explained\" tabindex=\"0\"><table class=\"ukc-organic-table\"><thead><tr><th scope=\"col\">Field<\/th><th scope=\"col\">Meaning<\/th><th scope=\"col\">What to enter<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">Key tag<\/th><td>A short numeric identifier for the DNSSEC key<\/td><td>Copy the number supplied by the DNS provider<\/td><\/tr><tr><th scope=\"row\">Algorithm<\/th><td>The code for the signing algorithm<\/td><td>Select the exact algorithm number supplied<\/td><\/tr><tr><th scope=\"row\">Digest type<\/th><td>The code for the method used to create the digest<\/td><td>Select the exact digest type supplied<\/td><\/tr><tr><th scope=\"row\">Digest<\/th><td>The long hexadecimal fingerprint of the key<\/td><td>Paste the complete value with no spaces<\/td><\/tr><\/tbody><\/table><\/div>\n<aside class=\"ukc-organic-note\"><strong>The UKC Client Area publishes DS records but does not generate them or sign the DNS zone.<\/strong> It can show the current registry state, add one exact record, delete one exact record or remove all DS records after confirmation.<\/aside>\n\n<h2 id=\"dnssec-change\">How should I change or remove DS records?<\/h2>\n<div class=\"ukc-organic-grid two\"><article class=\"ukc-organic-card\"><h3>Key rollover<\/h3><p>Follow the DNS provider&#8217;s sequence. A rollover can temporarily require both the old and new DS records. Remove the old record only when the provider says it is safe.<\/p><\/article><article class=\"ukc-organic-card\"><h3>Changing DNS provider<\/h3><p>Coordinate signing, nameservers and DS records as one migration. Do not leave a DS record pointing to keys that the new provider does not use.<\/p><\/article><article class=\"ukc-organic-card\"><h3>Turning DNSSEC off<\/h3><p>Use the provider&#8217;s secure transition process. Do not stop signing while a valid DS record is still expected by cached resolvers.<\/p><\/article><article class=\"ukc-organic-card\"><h3>Recovering from an error<\/h3><p>Compare the live registry record with the provider&#8217;s current values. If the website or email is failing, contact the DNS provider and UKC Support before making repeated changes.<\/p><\/article><\/div>\n<p>Nominet can publish more than one DS record for a domain, which supports controlled key changes. Most customers should use only the records their DNS provider explicitly supplies.<\/p>\n\n<h2 id=\"dnssec-questions\">Common questions<\/h2>\n<div class=\"ukc-organic-faq\"><details open><summary>Which domains can I manage through this UKC feature?<\/summary><p>The DNSSEC Setup tab is available to the authenticated owner of an eligible active .UK namespace domain managed through UKC&#8217;s Nominet registrar connection. This includes names such as .uk, .co.uk and .org.uk. Domains using another registrar connection may not show the tab.<\/p><\/details><details><summary>Does DNSSEC replace my SSL certificate?<\/summary><p>No. DNSSEC authenticates DNS answers. An SSL certificate and HTTPS encrypt the connection between a visitor and the website. A secure site can and often should use both.<\/p><\/details><details><summary>Can UKC create the DS record for me?<\/summary><p>No. The DNS provider currently signing your domain must generate and maintain the keys, then supply the exact DS values. UKC publishes the values you provide to Nominet.<\/p><\/details><details><summary>Will the change be instant?<\/summary><p>The registry state can update quickly, but DNS caches and validation results may take time to refresh. Avoid repeated changes while an earlier update is still propagating.<\/p><\/details><details><summary>What if I use UKC DNS but have no DS values?<\/summary><p>Do not add a record. The presence of a DNSSEC form does not mean the zone is already signed. Only publish values supplied by the service that is actively signing your DNS.<\/p><\/details><details><summary>Why can a wrong DS record break the domain?<\/summary><p>A validating resolver expects the signed DNS key to match the DS record in the .UK parent zone. If they do not match, validation fails and the resolver can return an error instead of the website or mail destination.<\/p><\/details><\/div>\n\n<aside class=\"ukc-organic-note\"><strong>Official references:<\/strong> Read <a href=\"https:\/\/registrars.nominet.uk\/uk-namespace\/registration-and-domain-management\/dnssec\/\">Nominet&#8217;s .UK DNSSEC guidance<\/a> and <a href=\"https:\/\/www.icann.org\/resources\/pages\/dnssec-what-is-it-why-important-2019-03-05-en\/\">ICANN&#8217;s DNSSEC explanation<\/a> for more technical background.<\/aside>\n<section class=\"ukc-organic-final\" aria-labelledby=\"dnssec-final\"><div><p class=\"ukc-organic-kicker\">Ready to manage an existing DS record?<\/p><h2 id=\"dnssec-final\">Open the domain and check the live Nominet state first<\/h2><p>Only add, change or remove DS records using the exact instructions from the DNS provider signing the domain.<\/p><\/div><div class=\"ukc-organic-final-actions\"><a class=\"ukc-organic-button\" href=\"https:\/\/billing.uk-cheapest.co.uk\/clientarea.php?action=domains\" data-ukc-organic-cta=\"final\" data-ukc-organic-destination=\"client_area\">Manage My .UK Domains<\/a><a href=\"https:\/\/billing.uk-cheapest.co.uk\/submitticket.php\" data-ukc-organic-cta=\"support\" data-ukc-organic-destination=\"helpdesk\">Ask UKC Support<\/a><\/div><\/section>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>DNSSEC for .UK domains DNSSEC helps prove that DNS answers are authentic DNSSEC digitally signs DNS data so compatible networks can detect altered or forged answers. It does not encrypt website traffic or replace an SSL certificate. For eligible .UK domains, UKC lets the account owner publish and manage the exact DS records supplied by &#8230; <a title=\"What Is DNSSEC and How Do I Manage DS Records?\" class=\"read-more\" href=\"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/\" aria-label=\"Read more about What Is DNSSEC and How Do I Manage DS Records?\">Read more&#8230;<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"generate_page_header":"","footnotes":""},"categories":[35],"tags":[],"class_list":["post-5712","post","type-post","status-publish","format-standard","hentry","category-domain-names"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>What Is DNSSEC? Manage .UK DS Records in UKC<\/title>\n<meta name=\"description\" content=\"Learn how DNSSEC protects DNS, when to use it and how eligible .uk domain owners can add or remove Nominet DS records in the UKC Client Area.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Is DNSSEC? Manage .UK DS Records in UKC\" \/>\n<meta property=\"og:description\" content=\"Learn how DNSSEC protects DNS, when to use it and how eligible .uk domain owners can add or remove Nominet DS records in the UKC Client Area.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/\" \/>\n<meta property=\"og:site_name\" content=\"UK-Cheapest.co.uk\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-15T18:05:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.uk-cheapest.co.uk\/support\/wp-content\/uploads\/2026\/08\/ogimage1.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1731\" \/>\n\t<meta property=\"og:image:height\" content=\"908\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"UKC\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ukchelpdesk\" \/>\n<meta name=\"twitter:site\" content=\"@ukchelpdesk\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"UKC\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/what-is-dnssec-and-how-do-i-manage-ds-records\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/what-is-dnssec-and-how-do-i-manage-ds-records\\\/\"},\"author\":{\"name\":\"UKC\",\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/#\\\/schema\\\/person\\\/135cf981b8a3a120603fcbc027eed746\"},\"headline\":\"What Is DNSSEC and How Do I Manage DS Records?\",\"datePublished\":\"2026-08-15T18:05:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/what-is-dnssec-and-how-do-i-manage-ds-records\\\/\"},\"wordCount\":1284,\"publisher\":{\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/#organization\"},\"articleSection\":[\"Domain Names\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/what-is-dnssec-and-how-do-i-manage-ds-records\\\/\",\"url\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/what-is-dnssec-and-how-do-i-manage-ds-records\\\/\",\"name\":\"What Is DNSSEC? Manage .UK DS Records in UKC\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/#website\"},\"datePublished\":\"2026-08-15T18:05:37+00:00\",\"description\":\"Learn how DNSSEC protects DNS, when to use it and how eligible .uk domain owners can add or remove Nominet DS records in the UKC Client Area.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/what-is-dnssec-and-how-do-i-manage-ds-records\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/what-is-dnssec-and-how-do-i-manage-ds-records\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/what-is-dnssec-and-how-do-i-manage-ds-records\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"UK-Cheapest.co.uk\",\"item\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What Is DNSSEC and How Do I Manage DS Records?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/#website\",\"url\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/\",\"name\":\"UK-Cheapest.co.uk\",\"description\":\"Cheap Domain Names, Web Hosting, Site Builder &amp; Web Security\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/#organization\",\"name\":\"UKC\",\"url\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Screenshot-2023-12-14-at-17.40.07.png\",\"contentUrl\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Screenshot-2023-12-14-at-17.40.07.png\",\"width\":217,\"height\":55,\"caption\":\"UKC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/ukchelpdesk\",\"https:\\\/\\\/www.instagram.com\\\/ukc_hosting\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/#\\\/schema\\\/person\\\/135cf981b8a3a120603fcbc027eed746\",\"name\":\"UKC\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/afbfe91204852778e8698de79f854348bec9aea508bef650c084d0c6daf2588d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/afbfe91204852778e8698de79f854348bec9aea508bef650c084d0c6daf2588d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/afbfe91204852778e8698de79f854348bec9aea508bef650c084d0c6daf2588d?s=96&d=mm&r=g\",\"caption\":\"UKC\"},\"sameAs\":[\"https:\\\/\\\/www.uk-cheapest.co.uk\"],\"url\":\"https:\\\/\\\/www.uk-cheapest.co.uk\\\/support\\\/author\\\/colin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What Is DNSSEC? Manage .UK DS Records in UKC","description":"Learn how DNSSEC protects DNS, when to use it and how eligible .uk domain owners can add or remove Nominet DS records in the UKC Client Area.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/","og_locale":"en_GB","og_type":"article","og_title":"What Is DNSSEC? Manage .UK DS Records in UKC","og_description":"Learn how DNSSEC protects DNS, when to use it and how eligible .uk domain owners can add or remove Nominet DS records in the UKC Client Area.","og_url":"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/","og_site_name":"UK-Cheapest.co.uk","article_published_time":"2026-08-15T18:05:37+00:00","og_image":[{"width":1731,"height":908,"url":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-content\/uploads\/2026\/08\/ogimage1.jpeg","type":"image\/jpeg"}],"author":"UKC","twitter_card":"summary_large_image","twitter_creator":"@ukchelpdesk","twitter_site":"@ukchelpdesk","twitter_misc":{"Written by":"UKC","Estimated reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/#article","isPartOf":{"@id":"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/"},"author":{"name":"UKC","@id":"https:\/\/www.uk-cheapest.co.uk\/support\/#\/schema\/person\/135cf981b8a3a120603fcbc027eed746"},"headline":"What Is DNSSEC and How Do I Manage DS Records?","datePublished":"2026-08-15T18:05:37+00:00","mainEntityOfPage":{"@id":"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/"},"wordCount":1284,"publisher":{"@id":"https:\/\/www.uk-cheapest.co.uk\/support\/#organization"},"articleSection":["Domain Names"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/","url":"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/","name":"What Is DNSSEC? Manage .UK DS Records in UKC","isPartOf":{"@id":"https:\/\/www.uk-cheapest.co.uk\/support\/#website"},"datePublished":"2026-08-15T18:05:37+00:00","description":"Learn how DNSSEC protects DNS, when to use it and how eligible .uk domain owners can add or remove Nominet DS records in the UKC Client Area.","breadcrumb":{"@id":"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.uk-cheapest.co.uk\/support\/what-is-dnssec-and-how-do-i-manage-ds-records\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"UK-Cheapest.co.uk","item":"https:\/\/www.uk-cheapest.co.uk\/support\/"},{"@type":"ListItem","position":2,"name":"What Is DNSSEC and How Do I Manage DS Records?"}]},{"@type":"WebSite","@id":"https:\/\/www.uk-cheapest.co.uk\/support\/#website","url":"https:\/\/www.uk-cheapest.co.uk\/support\/","name":"UK-Cheapest.co.uk","description":"Cheap Domain Names, Web Hosting, Site Builder &amp; Web Security","publisher":{"@id":"https:\/\/www.uk-cheapest.co.uk\/support\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.uk-cheapest.co.uk\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.uk-cheapest.co.uk\/support\/#organization","name":"UKC","url":"https:\/\/www.uk-cheapest.co.uk\/support\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.uk-cheapest.co.uk\/support\/#\/schema\/logo\/image\/","url":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-content\/uploads\/2023\/12\/Screenshot-2023-12-14-at-17.40.07.png","contentUrl":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-content\/uploads\/2023\/12\/Screenshot-2023-12-14-at-17.40.07.png","width":217,"height":55,"caption":"UKC"},"image":{"@id":"https:\/\/www.uk-cheapest.co.uk\/support\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/ukchelpdesk","https:\/\/www.instagram.com\/ukc_hosting\/"]},{"@type":"Person","@id":"https:\/\/www.uk-cheapest.co.uk\/support\/#\/schema\/person\/135cf981b8a3a120603fcbc027eed746","name":"UKC","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/afbfe91204852778e8698de79f854348bec9aea508bef650c084d0c6daf2588d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/afbfe91204852778e8698de79f854348bec9aea508bef650c084d0c6daf2588d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/afbfe91204852778e8698de79f854348bec9aea508bef650c084d0c6daf2588d?s=96&d=mm&r=g","caption":"UKC"},"sameAs":["https:\/\/www.uk-cheapest.co.uk"],"url":"https:\/\/www.uk-cheapest.co.uk\/support\/author\/colin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-json\/wp\/v2\/posts\/5712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-json\/wp\/v2\/comments?post=5712"}],"version-history":[{"count":1,"href":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-json\/wp\/v2\/posts\/5712\/revisions"}],"predecessor-version":[{"id":5713,"href":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-json\/wp\/v2\/posts\/5712\/revisions\/5713"}],"wp:attachment":[{"href":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-json\/wp\/v2\/media?parent=5712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-json\/wp\/v2\/categories?post=5712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.uk-cheapest.co.uk\/support\/wp-json\/wp\/v2\/tags?post=5712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}