Private Master relay adds encrypted zone transfers
Enterprise teams can relay explicitly declared zones from their own primary servers. Transfers require TSIG, with XFR-over-TLS available as an opt-in transport alongside TCP port 53.
Updates
News and practical DNS guidance
Meaningful product changes and carefully sourced articles in one place. Routine fixes and minor release notes stay out of the way. Service incidents belong on the status page.
News
Changes worth knowing about
Denmark begins the move to registrar-managed .dk domains
New .dk domains must now be registered through an approved registrar. Existing domains managed directly by Punktum dk have until 30 June 2028 to choose one.
Read the guideGuides and analysis
Go deeper
English-language guidance checked against primary sources and the current product.
Transfer your domain and set up DNS
Change registrar for your domain, and move DNS only if you want to. The two processes are separate; follow these steps to plan each one.
The new .dk model — how to choose a registrar
Understand the difference between a registry, a registrar, and a DNS provider, then compare current .dk options on an equal basis.
DNS compliance for EU financial institutions — NIS2 and DORA
For financial entities within scope, DORA and the NIS2 framework can both shape DNS risk management. This article maps the overlap, the limits, and the questions to take into a compliance review.
DORA compliance for DNS infrastructure — what IT teams need to know
DORA applies to financial entities within its scope and sets requirements for managing ICT risk. Here is how those requirements can map to DNS operations and which platform controls can support the work.
How DNS by echo reply aligns with NIST SP 800-81r3
NIST SP 800-81r3 is the first DNS security guidance update in 13 years. Here is how DNS by echo reply aligns with its key recommendations.