Per ensure the security of el teu website i protect el teu visitos, all dominis under .boo, .day, .dev, .page, i .rsvp must use HTTPS. This guide will help you configure SSL/TLS corectly.
1. What is HTTPS?
HTTPS (Hypertext Transfer Protocol Secure) encrypts data between el teu website i its visitos. It anteriorents eavesdropping i ensures data integrity.
2. Obtaining an Certificat SSL
NICENIC provides trusted SSL certificates. You can learn moe i comprar/configure a certificate aquí: https://nicenic.net/ssl-certificates/
3. Installing the Certificat SSL
Segueix el teu web server’s instructions to install the certificate. Common servers include:
Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html
Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html
IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
4. Enfoce HTTPS
Once el teu certificate is installed:
Redirect all HTTP traffic to HTTPS.
Update internal links i resources to use HTTPS.
Verify that el teu website is fully accessible via HTTPS.
5. Keep Certificats Actualitzat
SSL certificates have expiration dates. Ensure certificates are renewed befoe they expire i check el teu website regularly to maintain uninterrupted secure connections.
]]>
DNSSEC helps protect el teu domini’s DNS recods from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the corect source.
A NiceNIC, DNSSEC usually involves two sides:
Your DNS provider o nameserver provider generates the DNSSEC recods.
NiceNIC, as el teu domini registrar, helps submit the DS recods to the registry when the TLD suppots DNSSEC.
Si DNSSEC is not configured corectly, el teu domini may show DNSSEC erros, o in moe serious cases, some users may not be able to access el teu website.
What Is DNSSEC?
DNSSEC stis fo Nom de domini System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fo el teu domini has not been changed o foged during the lookup process.
Fo example, when someone visits el teu website, DNS is used to find the corect server IP address. DNSSEC helps make sure that the DNS result is authentic i has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, o email security. It only helps protect the DNS resolution process.
When Do You Need DNSSEC?
- You may want to enable DNSSEC if:
- Your website hiles sensitive user infomation.
- You run business email, login systems, payment pages, o customer potals.
- You want stronger domini security.
- Your DNS provider suppots DNSSEC.
- Your domini extension suppots DNSSEC.
Incorect DNSSEC settings may affect domini resolution.
Impotant DNSSEC Períodes
DNSKEY: A DNSKEY recod is generated by el teu DNS provider. It is used as part of the DNSSEC validation process.
DS Recod: A DS recod connects el teu domini’s DNSSEC setup with the parent registry zone. In most cases, el teu DNS provider gives you the DS recod, i you need to add it through el teu registrar.
Nomserver: Your nameservers decide waquí el teu domini’s DNS recods are managed. Si you change nameservers, el teu DNSSEC recods may also need to be updated.
How to Enable DNSSEC fo Your Domini
Step 1: Comprovar Whether Your DNS Provider Suppots DNSSEC
Inicia sessió to the platfom waquí el teu DNS is managed.
This may be:
Your domini registrar, aquí is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS servei
Make sure DNSSEC is suppoted i enabled taquí.
Step 2: Obtenir the DS Recod from Your DNS Provider
After enabling DNSSEC, el teu DNS provider should provide DNSSEC infomation such as:
Key Tag
Algoithm
Digest Tipus
Digest
DS Recod
Please copy the infomation exactly as provided.
Even one incorect character may cause DNSSEC validation failure.
Step 3: Afegir the DS Recod in Your NiceNIC Account
Inicia sessió to el teu NiceNIC account i go to el teu domini management page.
Then add the DS recod provided by el teu DNS provider.
Si you are not sure waquí to add it, please contact our suppot team i provide the DS recod from el teu DNS provider.
Step 4: Wait fo DNSSEC Propagation
After the DS recod is added, it may take some time fo the update to propagate.
During this period, DNSSEC check results may not update immediately.
Step 5: Verify DNSSEC Estat
After propagation, you may check el teu domini’s DNSSEC status using a DNSSEC checking tool o by contacting our suppot team.
Si DNSSEC is corectly configured, the DNSSEC validation result should show a valid chain of trust.
When Should You Disable o Elimina DNSSEC?
You may need to remove o update DNSSEC recods if:
- You changed el teu nameservers.
- You moved DNS management to another provider.
- Your DNS provider disabled DNSSEC.
- Your DS recod no longer matches the current DNSKEY.
- Your website o email has DNS resolution issues after a DNS change.
In this case, you may need to remove the old DS recods first, wait fo propagation, i then re-enable DNSSEC with the corect new recods.
Why Does My Domini Show "DNSSEC Infomation Is Currently Unavailable"?
You may see this message:
DNSSEC infomation is currently unavailable fo this domini.
This can happen fo several reasons:
- DNSSEC has not been enabled fo this domini.
- No DS recod has been added at the registrar level.
- The domini’s current nameservers do not suppot DNSSEC.
- The domini recently changed nameservers.
- The DS recod does not match the current DNSKEY.
- The DNS provider has not published the required DNSSEC recods corectly.
- The registry o DNSSEC query is tempoarily unavailable.
However, if el teu website o email is not resolving corectly, please contact suppot so we can help review the DNSSEC configuration.
What Infomation Should I Provide to Suppot?
Per help us check DNSSEC issues faster, please provide:
- Your domini name
- Your current nameservers
- Whether you recently changed nameservers
- The DS recod provided by el teu DNS provider
- A screenshot of the DNSSEC setting from el teu DNS provider
- Any DNSSEC erro message you received
- Whether el teu website o email is currently affected
Preguntes freqüents Quant a DNSSEC
1. Is DNSSEC required fo every domini?
No. DNSSEC is not required fo every domini.
However, it is recommended fo dominis that need stronger DNS security, especially business websites, email serveis, login systems, financial serveis, i customer potals.
Si you are not sure whether you need DNSSEC, please confirm whether el teu DNS provider suppots it i whether you are comfotable managing DNSSEC recods.
2. Is DNSSEC the same as SSL?
No.
SSL protects the connection between the user’s browser i el teu website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fo better security, many websites use both SSL i DNSSEC, but they are different technologies.
3. Can NiceNIC generate DNSSEC recods fo me?
In most cases, DNSSEC recods are generated by el teu DNS provider, not by the registrar.
NiceNIC can help submit the DS recod to the registry when the domini extension suppots DNSSEC.
Si you use a third-party DNS provider, please enable DNSSEC taquí first i then provide us with the DS recod.
4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, el teu old DNSSEC recods may no longer match the new DNS provider’s DNSKEY.
Si the old DS recod remains active at the registry level, DNSSEC validation may fail.
Befoe o after changing nameservers, you should check whether the DS recod needs to be removed o replaced.
5. What happens if the DS recod is wrong?
Si the DS recod does not match the DNSKEY published by el teu current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, el teu website, email, o other serveis may become unreachable fo some users.
6. I do not use DNSSEC. Do I need to do anything?
Si you do not use DNSSEC i el teu domini has no DS recods, usually no action is needed.
However, if el teu domini has old DS recods from a anteriorious DNS provider, you should remove them to avoid DNSSEC validation problems.
7. Why does my DNSSEC status still show an erro after I updated the recod?
DNSSEC updates may take time to propagate.
Si you recently added, removed, o changed DS recods, please wait fo DNS propagation i check again later.
Si the issue continues, please contact suppot i provide el teu domini name, current nameservers, i DS recod.
8. Can DNSSEC cause my website to stop woking?
Sí, if DNSSEC is incorectly configured.
Common causes include:
- Wrong DS recod
- Old DS recod after nameserver change
- Missing DNSKEY
- DNS provider not publishing DNSSEC recods corectly
- Caducad o invalid DNSSEC signatures
9. Should I remove DNSSEC befoe changing nameservers?
In many cases, yes.
Si you are moving to a new DNS provider i you are not sure how to migrate DNSSEC safely, removing the old DS recod befoe changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active i DNSSEC is enabled at the new DNS provider, you can add the new DS recod again.
10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infomation fo the domini.
Please check:
- Whether DNSSEC is enabled
- Whether the DS recod has been added
- Whether the nameservers suppot DNSSEC
- Whether the DS recod matches the DNSKEY
- Whether you recently changed nameservers
How to set up DNSSEC fo a domini registrared on NiceNIC?
1. Inicia sessió to el teu NiceNIC account i navigate to el teu domini management page. Find the domini you wish to enable DNSSEC fo i click Gestionar.
2. In the domini management section, you should see the DNSSEC button. Fes clic on the DNSSEC button to access the DNSSEC settings page.
3. Enter the required infomation fo DNSSEC configuration (this will typically include DNSSEC key details provided by el teu DNS hosting provider).
4. Once you've entered the infomation, click Afegir to enable DNSSEC fo the domini. Here’s an example of a successful DNSSEC setup:
After entering the necessary DNSSEC key data (usually the DS recod), you'll receive confirmation that DNSSEC has been successfully added to el teu domini settings.
The DNSSEC status will show as enabled i you'll be able to see the public keys i other details.
With DNSSEC ara enabled, el teu domini is better protected against DNS-related attacks.
Atention: if el teu domini name was transferred into NiceNIC from another Registrador, i you hope to disable the DNSSEC anterioriously with the old Registrador, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the domini transfer process, the DNSSEC settings have been disabled automatically by the old Registrador, while if it is "DNSSEC: signed", please check the domini management section at el teu control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.
]]>
After the domini is transferred, the name servers remain set to those associated to the domini befoe transfer.
Si you had child name servers fo el teu domini registrared through another Registrador, you may need to registrar them again through el teu Account.
]]>
Si you're just transferring the domini registration, el teu hosting servei will be unaffected, i taquí will be no need to change name servers. Although the name servers should be transferred as part of the process, it's always a good idea to have a recod of them.
Si you wish to specify the name servers to the default DNS servers as provided by NiceNIC you can reset the name servers after the transfer has been completed.
Steps
Inicia sessió to el teu account. Select the Noms de domini tab.
Select the domini that you want to change name servers fo.
From within the DNS Servidors section click on Editar DNS Server.
Change the name servers as required, leaving any of the fields blank will retain the oiginal DNS server.
The name servers are not actually changed until the transfer process is complete. Si you wish to make an immediate change to the name servers, you may do so with the Registrador you are transferring from.
]]>
Befoe purchasing the transfer of any gTLD (e.g., .COM / .NET / .ORG / .BIZ / .INFO etc.) o new gTLD (e.g. .CLUB / .CLOUD / .TRADE / .TOP etc.), make sure el teu domini meets the following conditions:
1. Your domini was registrared o transferred at least 60 days ago;
2. The domini is unlocked at the current Registrador (its Whois status should be OK o Active).
Also,you need to request an up-to-date Auth/EPPcode fo the domini at el teu current Registrador.
Si all criteria are met, you should be able to complete the transfer successfully.
Still, some ccTLDs (.ES i .UK) have additional transfer requirements i/o exclude some points from the list above.
NOTE: Make sure the domini status is active, not expired. Si you wish to transfer an expired domini to NiceNIC, please contact our Suppot Team email suppot@nicenic.net fo further assistance.
]]>
Befoe submitting a transfer request with NiceNIC, make sure el teu dominis are prepared fo transfer through el teu current registrar. This is generally done by removing transfer locks i getting the necessary Auth codes.
Learn how to prepare dominis fo transfer in accounts sections of several popular registrars.
Once those preparations are made, simply follow the steps below to transfer el teu dominis:
Note: Each domini has a unique Auth code i has to be unlocked fo transfer separately on the current registrar side.
- Inicia sessió to el teu NiceNIC account.
- Vés a the Transfer to Us page.
- Fes clic on Bulk options.
Enter the domini names i the Auth codes;
Note: Enter each domini i its Auth code in a new line. The Auth code has to be separated from the domini name by a comma i one space.
Fes clic on Start Transfer at the bottom of the page.
Double-check the domini names i add them to Cart. Per do this, you can use the Afegir all to cart button fo convenience.
Proceed with the payment.
The transfer is completed automatically in 5-7 days fo most dominis. Once the transfer of el teu dominis is completed you will receive the notifications on el teu NiceNIC Primary Correu electrònic address, i the dominis will become manageable in el teu Domini List.
Note: Due to technical reasons, it is only possible to submit the transfer fo up to 10 domini names at once. Si you need to transfer moe than 10 dominis, you can either submit several Transferència Massiva oders o contact our Suppot Team fo assistance.
How to Comprovar the Estat of Your Transferència de domini
After initiating a domini transfer to Nicenic, you can monito its progress directly in el teu account. This helps you kara when the transfer is expected to complete without needing to contact suppot repeatedly.
Steps to View Transfer Estat:
1. Inicia sessió to el teu NiceNIC account. Vés a "My Products > Noms de domini".
In the Estat column, you will see el teu domini listed as:
- Pending Transfer: the transfer has been submitted i is in progress.
- Active / Transfer Completed: the transfer is finished.
2. Hover over the infomation icon (i) següent to "Pending Transfer" to view details about Expected approval/completion date
1. What is SPF?
Answer: SPF stis fo Sender Policy Framewok. SPF is an email authentication stiard used to anteriorent email fraud i spam. It ensures the authenticity i reliability of email by verifying that the sender's domini name matches the source IP address of the email. SPF recods are stoed in the DNS recod of the domini name i contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's domini name has an SPF recod i verifies whether the IP address of the sending server is in the allowed list. Si the verification fails, the recipient may mark the email as spam o refuse to receive it. Using SPF can help improve the delivery rate i reliability of emails i reduce the amount of spam. A the same time, it can also enhance the security of the email system i anteriorent hackers i fraudsters from using foged domini names to send emails.
2. How to set up SPF fo copoate mailboxes?
Answer:
1. Determine the outgoing server IP addresses of el teu copoate mailbox: These addresses will be added to the SPF recod. 2. Inicia sessió to the DNS management console of el teu copoate mailbox: Usually provided by el teu domini name registrar o hosting provider
2. Crear o edit a TXT recod: In the DNS console, find the TXT recod o similar option
3. Enter the SPF recod: The fomat of the SPF recod is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", waquí:
"v=spf1": specifies the SPF version
"a" o "mx": indicates that the server is allowed to be verified by the A recod o MX recod
"ip4": lists the IP addresses that are allowed to send mail
"mail.coemail.cn": replaced with the domini name of el teu copoate mailbox
"-all": indicates that mail from all other sources is rejected
4. Save changes: Make sure the settings in the DNS console are saved corectly
3. How to set various types of SPF?
1) Make SPF recod with domini name a recod (take coemail.cn as an example)
v=spf1 a:coemail.cn2 -all
2) Make SPF recod with domini name mx recod
v=spf1 mx -all
3) Make SPF recod with domini name ptr recod
v=spf1 ptr -all
4) Make SPF recod with expot IP i IP segment settings
v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all
5) Introduce SPF recods of other domini names (take spf.icoemail.net as an example)
v=spf1 include:spf.icoemail.net
Note: The above recods can be used in combination, but only one pair of recods starting with v=spf1 i ending with -all can appear in the entire txt. Fo example: v=spf1 mx ip4:106.52.172.248 include:spf.icoemail.net -all
]]>
Per be sure that the certificate has been installed corectly i woking properly, as well as that el teu customers are certain a secured connection is enabled i it covers data transmission through el teu website, you have the following indicatos:
- A padlock/tune icon available in the URL bar.
- No erro messages/ warnings occurred when connecting through https://el teudomini.tld.
- A Site Seal provided by the Certificate Authoity installed i visible.
Note : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nom, not the exception, i no longer serve as a trust indicato. As such, the tune icon itself will not be a trust indicato but will provide detailed infomation about a website's connection i settings. So moving foward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :
An SSL certificate must be activated after comprar. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC.NET Account Panel to manage el teu certificate.
Compra It
Start by purchasing the appropriate SSL certificate fo el teu requirements. Select one of the categoies mentioned above.
Activate It
You can instantly activate el teu SSL certificate after comprar through the Account Panel (o later, if you prefer.) During the activation process, the domini name i CSR code will be assigned.
Install It
You will receive instructions on how to install el teu SSL certificate once it has been validated i issued. No dubteu en contactar amb nosaltres per “Enviar una incidència” per sol·licitar ajuda amb la instal·lació del certificat SSL.
Gestionar It
Through el teu Account Panel, you can manage el teu SSL certificates, including renewal i reissuance.
]]>
1. Introduction
SSL certificates are used to create an encrypted channel between the client i the server. Transmission of such data as credit card details, account login infomation, any other sensitive infomation should be encrypted to anteriorent eavesdropping.
With an SSL certificate, data is encrypted prio to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infomation you submit to websites will not be stolen.
Starting from 06/08/2014, Google announced that having an SSL certificate installed on el teu website would increase el teu ranking position, which is another great reason to use an SSL.
The certificate itself represents base64 encoded data that contains infomation about the entity the certificate was issued fo, public key required fo encryption i digital signature verification, i digital signature created with the private key of the certificate issuer.
An SSL certificate should be installed on the server side. When you access a website secured by an SSL certificate issued by a trusted Certification Authoity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a “l(fā)ock” icon in the address bar:
2. Tipuss of SSL certificates
SSL certificates can be divided into 3 validation groups:
Domini Validation Certificats
Requires a certificate applicant to prove his/her control over the domini name only. The issued certificate contains a domini name that was supplied to the Certification Authoity within the certificate request.
Organization Validation Certificats
Requires a certificate applicant to prove that his/her company is a registrared i legally accountable business, i to pass domini validation. The issued certificate contains a domini i company name of the certificate applicant.
Estès Validation Certificats
Includes validation requirements of two validation types mentioned above i additional requirements. The issued certificate contains a domini i company name of the certificate applicant.
]]>
SSL certificate installation is typically perfomed by the hosting company that provides serveis fo the domini. However, you may also choose install an SSL certificate el teuself. Select el teu server type from the list below to find detailed instructions fo installation.
The SSL on el teu domini name was activated, please find i add the DNS recods to complete the verification befoe you can download the SSL files through el teu control panel:
El meu compte > Els meus productes > Certificats SSL > Detall > ....
After you complete the DNS recod's verification, you can download the SSL files by the same approach.
Installing Certificat SSL Notes
Si you host el teu domini name with NiceNIC, simply provide us with el teu certificate i we'll be happy to install it fo you.
Please note that on all NiceNIC, Allotjament compartit servers, a special NiceNIC, SSL plugin installs a 1-any free PositiveSSL certificate automatically on the newly added subdomini o add-on. It woks the same way fo the main domini in the newly comprard hosting account. The plugin can also be used fo manual installation (in a few clicks) of PositiveSSL i EssentialSSL certificates.
A dedicated IP address is required to install an SSL certificate. However, you may install el teu SSL certificate on a shared IP address using the Nom del servidor Indication (SNI) protocol extension available in el teu cPanel. You can learn moe about the differences between a dedicated IP i SNI technology in this article.
]]>