About deSEC
deSEC is a free DNS hosting service that signs every zone with DNSSEC. It runs on open source software and offers a web interface, a REST API and cloud integrations for automated setups.
What it does
The service supports a broad range of record types, including HTTPS, SVCB, TLSA and OPENPGPKEY. The web interface validates records in real time, and the REST API supports bulk operations. Terraform providers and client libraries for Go, Python and JavaScript make it easy to use in automated environments.
Key features
- Automatic DNSSEC signing with elliptic curve keys
- REST API with bulk operations
- Support for record types such as HTTPS and TLSA
- Two-factor login with authenticator apps
- Terraform provider and client libraries
Who it's for
deSEC suits developers and system administrators who want secure DNS without paying for it. It also suits people who manage DNS through scripts or CI pipelines. Web hosters can use it for many domains, according to the site.
Pricing and good to know
The service is free for everyone to use. The site says new registrations of dedyn.io domains are suspended until further notice after a spike in abusive registrations, so check current availability before you sign up. The site lists dynDNS and managed domain options.
Highlights
- Automatic DNSSEC signing with elliptic curve keys
- REST API with bulk operations
- Support for record types such as HTTPS and TLSA
- Two-factor login with authenticator apps
- Terraform provider and client libraries
