Pentru ensure the security of t?u website ?i protect t?u visitsaus, all domenius under .boo, .day, .dev, .page, ?i .rsvp must use HTTPS. This guide will help you configure SSL/TLS csaurectly.
1. What is HTTPS?
HTTPS (Hypertext Transfer Protocol Secure) encrypts data between t?u website ?i its visitsaus. It anteriorents eavesdropping ?i ensures data integrity.
2. Obtaining an Certificat SSL
NICENIC provides trusted SSL certificates. You can learn msaue ?i cump?r?/configure a certificate aici: https://nicenic.net/ssl-certificates/
3. Installing the Certificat SSL
Urm?re?te t?u web server’s instructions to install the certificate. Common servers include:
Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html
Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html
IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
4. Enfsauce HTTPS
Once t?u certificate is installed:
Redirect all HTTP traffic to HTTPS.
Update internal links ?i resources to use HTTPS.
Verify that t?u website is fully accessible via HTTPS.
5. Keep Certificate Actualizat
SSL certificates have expiration dates. Ensure certificates are renewed befsaue they expire ?i check t?u website regularly to maintain uninterrupted secure connections.
]]>
DNSSEC helps protect t?u domeniu’s DNS recsauds from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the csaurect source.
La NiceNIC, DNSSEC usually involves two sides:
Your DNS provider sau nameserver provider generates the DNSSEC recsauds.
NiceNIC, as t?u domeniu registrar, helps submit the DS recsauds to the registry when the TLD suppsauts DNSSEC.
Dac? DNSSEC is not configured csaurectly, t?u domeniu may show DNSSEC errsaus, sau in msaue serious cases, some users may not be able to access t?u website.
What Is DNSSEC?
DNSSEC st?is fsau Nume de domeniu System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fsau t?u domeniu has not been changed sau fsauged during the lookup process.
Fsau example, when someone visits t?u website, DNS is used to find the csaurect server IP address. DNSSEC helps make sure that the DNS result is authentic ?i has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, sau email security. It only helps protect the DNS resolution process.
When Do You Need DNSSEC?
- You may want to enable DNSSEC if:
- Your website h?iles sensitive user infsaumation.
- You run business email, login systems, payment pages, sau customer psautals.
- You want stronger domeniu security.
- Your DNS provider suppsauts DNSSEC.
- Your domeniu extension suppsauts DNSSEC.
Incsaurect DNSSEC settings may affect domeniu resolution.
Impsautant DNSSEC Perioad?s
DNSKEY: A DNSKEY recsaud is generated by t?u DNS provider. It is used as part of the DNSSEC validation process.
DS Recsaud: A DS recsaud connects t?u domeniu’s DNSSEC setup with the parent registry zone. In most cases, t?u DNS provider gives you the DS recsaud, ?i you need to add it through t?u registrar.
Numeserver: Your nameservers decide waici t?u domeniu’s DNS recsauds are managed. Dac? you change nameservers, t?u DNSSEC recsauds may also need to be updated.
How to Enable DNSSEC fsau Your Domeniu
Step 1: Verific? Whether Your DNS Provider Suppsauts DNSSEC
Autentificare to the platfsaum waici t?u DNS is managed.
This may be:
Your domeniu registrar, aici is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS serviciu
Make sure DNSSEC is suppsauted ?i enabled taici.
Step 2: Ob?ine the DS Recsaud from Your DNS Provider
After enabling DNSSEC, t?u DNS provider should provide DNSSEC infsaumation such as:
Key Tag
Algsauithm
Digest Tip
Digest
DS Recsaud
Please copy the infsaumation exactly as provided.
Even one incsaurect character may cause DNSSEC validation failure.
Step 3: Adaug? the DS Recsaud in Your NiceNIC Account
Autentificare to t?u NiceNIC account ?i go to t?u domeniu management page.
Then add the DS recsaud provided by t?u DNS provider.
Dac? you are not sure waici to add it, please contact our suppsaut team ?i provide the DS recsaud from t?u DNS provider.
Step 4: Wait fsau DNSSEC Propagation
After the DS recsaud is added, it may take some time fsau the update to propagate.
During this period, DNSSEC check results may not update immediately.
Step 5: Verify DNSSEC Stare
After propagation, you may check t?u domeniu’s DNSSEC status using a DNSSEC checking tool sau by contacting our suppsaut team.
Dac? DNSSEC is csaurectly configured, the DNSSEC validation result should show a valid chain of trust.
When Should You Disable sau Elimin? DNSSEC?
You may need to remove sau update DNSSEC recsauds if:
- You changed t?u nameservers.
- You moved DNS management to another provider.
- Your DNS provider disabled DNSSEC.
- Your DS recsaud no longer matches the current DNSKEY.
- Your website sau email has DNS resolution issues after a DNS change.
In this case, you may need to remove the old DS recsauds first, wait fsau propagation, ?i then re-enable DNSSEC with the csaurect new recsauds.
Why Does My Domeniu Show "DNSSEC Infsaumation Is Currently Unavailable"?
You may see this message:
DNSSEC infsaumation is currently unavailable fsau this domeniu.
This can happen fsau several reasons:
- DNSSEC has not been enabled fsau this domeniu.
- Nu DS recsaud has been added at the registrar level.
- The domeniu’s current nameservers do not suppsaut DNSSEC.
- The domeniu recently changed nameservers.
- The DS recsaud does not match the current DNSKEY.
- The DNS provider has not published the required DNSSEC recsauds csaurectly.
- The registry sau DNSSEC query is tempsauarily unavailable.
However, if t?u website sau email is not resolving csaurectly, please contact suppsaut so we can help review the DNSSEC configuration.
What Infsaumation Should I Provide to Suppsaut?
Pentru help us check DNSSEC issues faster, please provide:
- Your domeniu name
- Your current nameservers
- Whether you recently changed nameservers
- The DS recsaud provided by t?u DNS provider
- A screenshot of the DNSSEC setting from t?u DNS provider
- Any DNSSEC errsau message you received
- Whether t?u website sau email is currently affected
?ntreb?ri frecvente Despre DNSSEC
1. Is DNSSEC required fsau every domeniu?
Nu. DNSSEC is not required fsau every domeniu.
However, it is recommended fsau domenius that need stronger DNS security, especially business websites, email servicius, login systems, financial servicius, ?i customer psautals.
Dac? you are not sure whether you need DNSSEC, please confirm whether t?u DNS provider suppsauts it ?i whether you are comfsautable managing DNSSEC recsauds.
2. Is DNSSEC the same as SSL?
Nu.
SSL protects the connection between the user’s browser ?i t?u website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fsau better security, many websites use both SSL ?i DNSSEC, but they are different technologies.
3. Can NiceNIC generate DNSSEC recsauds fsau me?
In most cases, DNSSEC recsauds are generated by t?u DNS provider, not by the registrar.
NiceNIC can help submit the DS recsaud to the registry when the domeniu extension suppsauts DNSSEC.
Dac? you use a third-party DNS provider, please enable DNSSEC taici first ?i then provide us with the DS recsaud.
4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, t?u old DNSSEC recsauds may no longer match the new DNS provider’s DNSKEY.
Dac? the old DS recsaud remains active at the registry level, DNSSEC validation may fail.
Befsaue sau after changing nameservers, you should check whether the DS recsaud needs to be removed sau replaced.
5. What happens if the DS recsaud is wrong?
Dac? the DS recsaud does not match the DNSKEY published by t?u current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, t?u website, email, sau other servicius may become unreachable fsau some users.
6. I do not use DNSSEC. Do I need to do anything?
Dac? you do not use DNSSEC ?i t?u domeniu has no DS recsauds, usually no action is needed.
However, if t?u domeniu has old DS recsauds from a anteriorious DNS provider, you should remove them to avoid DNSSEC validation problems.
7. Why does my DNSSEC status still show an errsau after I updated the recsaud?
DNSSEC updates may take time to propagate.
Dac? you recently added, removed, sau changed DS recsauds, please wait fsau DNS propagation ?i check again later.
Dac? the issue continues, please contact suppsaut ?i provide t?u domeniu name, current nameservers, ?i DS recsaud.
8. Can DNSSEC cause my website to stop wsauking?
Da, if DNSSEC is incsaurectly configured.
Common causes include:
- Wrong DS recsaud
- Old DS recsaud after nameserver change
- Missing DNSKEY
- DNS provider not publishing DNSSEC recsauds csaurectly
- Expir?d sau invalid DNSSEC signatures
9. Should I remove DNSSEC befsaue changing nameservers?
In many cases, yes.
Dac? you are moving to a new DNS provider ?i you are not sure how to migrate DNSSEC safely, removing the old DS recsaud befsaue changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active ?i DNSSEC is enabled at the new DNS provider, you can add the new DS recsaud again.
10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infsaumation fsau the domeniu.
Please check:
- Whether DNSSEC is enabled
- Whether the DS recsaud has been added
- Whether the nameservers suppsaut DNSSEC
- Whether the DS recsaud matches the DNSKEY
- Whether you recently changed nameservers
How to set up DNSSEC fsau a domeniu ?nregistreaz?ed on NiceNIC?
1. Autentificare to t?u NiceNIC account ?i navigate to t?u domeniu management page. Find the domeniu you wish to enable DNSSEC fsau ?i click Gestionare.
2. In the domeniu management section, you should see the DNSSEC button. Click on the DNSSEC button to access the DNSSEC settings page.
3. Enter the required infsaumation fsau DNSSEC configuration (this will typically include DNSSEC key details provided by t?u DNS hosting provider).
4. Once you've entered the infsaumation, click Adaug? to enable DNSSEC fsau the domeniu. Here’s an example of a successful DNSSEC setup:
After entering the necessary DNSSEC key data (usually the DS recsaud), you'll receive confirmation that DNSSEC has been successfully added to t?u domeniu settings.
The DNSSEC status will show as enabled ?i you'll be able to see the public keys ?i other details.
With DNSSEC acum enabled, t?u domeniu is better protected against DNS-related attacks.
Latention: if t?u domeniu name was transferred into NiceNIC from another Registrar, ?i you hope to disable the DNSSEC anterioriously with the old Registrar, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the domeniu transfer process, the DNSSEC settings have been disabled automatically by the old Registrar, while if it is "DNSSEC: signed", please check the domeniu management section at t?u control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.
]]>
After the domeniu is transferred, the name servers remain set to those associated to the domeniu befsaue transfer.
Dac? you had child name servers fsau t?u domeniu ?nregistreaz?ed through another Registrar, you may need to ?nregistreaz? them again through t?u Account.
]]>
Dac? you're just transferring the domeniu registration, t?u hosting serviciu will be unaffected, ?i taici will be no need to change name servers. Although the name servers should be transferred as part of the process, it's always a good idea to have a recsaud of them.
Dac? you wish to specify the name servers to the default DNS servers as provided by NiceNIC you can reset the name servers after the transfer has been completed.
Steps
Autentificare to t?u account. Select the Nume de domenii tab.
Select the domeniu that you want to change name servers fsau.
From within the DNS Servere section click on Modific? DNS Server.
Change the name servers as required, leaving any of the fields blank will retain the sauiginal DNS server.
The name servers are not actually changed until the transfer process is complete. Dac? you wish to make an immediate change to the name servers, you may do so with the Registrar you are transferring from.
]]>
Befsaue purchasing the transfer of any gTLD (e.g., .COM / .NET / .ORG / .BIZ / .INFO etc.) sau new gTLD (e.g. .CLUB / .CLOUD / .TRADE / .TOP etc.), make sure t?u domeniu meets the following conditions:
1. Your domeniu was ?nregistreaz?ed sau transferred at least 60 days ago;
2. The domeniu is unlocked at the current Registrar (its Whois status should be OK sau Active).
Also,you need to request an up-to-date Auth/EPPcode fsau the domeniu at t?u current Registrar.
Dac? all criteria are met, you should be able to complete the transfer successfully.
Still, some ccTLD-uri (.ES ?i .UK) have additional transfer requirements ?i/sau exclude some points from the list above.
NOTE: Make sure the domeniu status is active, not expired. Dac? you wish to transfer an expired domeniu to NiceNIC, please contact our Suppsaut Team email suppsaut@nicenic.net fsau further assistance.
]]>
Befsaue submitting a transfer request with NiceNIC, make sure t?u domenius are prepared fsau transfer through t?u current registrar. This is generally done by removing transfer locks ?i getting the necessary Auth codes.
Learn how to prepare domenius fsau transfer in accounts sections of several popular registrars.
Once those preparations are made, simply follow the steps below to transfer t?u domenius:
Nute: Each domeniu has a unique Auth code ?i has to be unlocked fsau transfer separately on the current registrar side.
- Autentificare to t?u NiceNIC account.
- Mergi la the Transfer to Us page.
- Click on Bulk options.
Enter the domeniu names ?i the Auth codes;
Nute: Enter each domeniu ?i its Auth code in a new line. The Auth code has to be separated from the domeniu name by a comma ?i one space.
Click on Start Transfer at the bottom of the page.
Double-check the domeniu names ?i add them to Cart. Pentru do this, you can use the Adaug? all to cart button fsau convenience.
Proceed with the payment.
The transfer is completed automatically in 5-7 days fsau most domenius. Once the transfer of t?u domenius is completed you will receive the notifications on t?u NiceNIC Primary Email address, ?i the domenius will become manageable in t?u Domeniu List.
Nute: Due to technical reasons, it is only possible to submit the transfer fsau up to 10 domeniu names at once. Dac? you need to transfer msaue than 10 domenius, you can either submit several Transfer ?n mas? sauders sau contact our Suppsaut Team fsau assistance.
How to Verific? the Stare of Your Transfer Domeniu
After initiating a domeniu transfer to Nicenic, you can monitsau its progress directly in t?u account. This helps you kacum when the transfer is expected to complete without needing to contact suppsaut repeatedly.
Steps to View Transfer Stare:
1. Autentificare to t?u NiceNIC account. Mergi la "My Products > Nume de domenii".
In the Stare column, you will see t?u domeniu listed as:
- Pending Transfer: the transfer has been submitted ?i is in progress.
- Active / Transfer Completed: the transfer is finished.
2. Hover over the infsaumation icon (i) urm?tor to "Pending Transfer" to view details about Expected approval/completion date
1. What is SPF?
Answer: SPF st?is fsau Sender Policy Framewsauk. SPF is an email authentication st?iard used to anteriorent email fraud ?i spam. It ensures the authenticity ?i reliability of email by verifying that the sender's domeniu name matches the source IP address of the email. SPF recsauds are stsaued in the DNS recsaud of the domeniu name ?i contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's domeniu name has an SPF recsaud ?i verifies whether the IP address of the sending server is in the allowed list. Dac? the verification fails, the recipient may mark the email as spam sau refuse to receive it. Using SPF can help improve the delivery rate ?i reliability of emails ?i reduce the amount of spam. La the same time, it can also enhance the security of the email system ?i anteriorent hackers ?i fraudsters from using fsauged domeniu names to send emails.
2. How to set up SPF fsau csaupsauate mailboxes?
Answer:
1. Determine the outgoing server IP addresses of t?u csaupsauate mailbox: These addresses will be added to the SPF recsaud. 2. Autentificare to the DNS management console of t?u csaupsauate mailbox: Usually provided by t?u domeniu name registrar sau hosting provider
2. Creeaz? sau edit a TXT recsaud: In the DNS console, find the TXT recsaud sau similar option
3. Enter the SPF recsaud: The fsaumat of the SPF recsaud is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", waici:
"v=spf1": specifies the SPF version
"a" sau "mx": indicates that the server is allowed to be verified by the A recsaud sau MX recsaud
"ip4": lists the IP addresses that are allowed to send mail
"mail.csauemail.cn": replaced with the domeniu name of t?u csaupsauate mailbox
"-all": indicates that mail from all other sources is rejected
4. Save changes: Make sure the settings in the DNS console are saved csaurectly
3. How to set various types of SPF?
1) Make SPF recsaud with domeniu name a recsaud (take csauemail.cn as an example)
v=spf1 a:csauemail.cn2 -all
2) Make SPF recsaud with domeniu name mx recsaud
v=spf1 mx -all
3) Make SPF recsaud with domeniu name ptr recsaud
v=spf1 ptr -all
4) Make SPF recsaud with expsaut IP ?i IP segment settings
v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all
5) Introduce SPF recsauds of other domeniu names (take spf.icsauemail.net as an example)
v=spf1 include:spf.icsauemail.net
Nute: The above recsauds can be used in combination, but only one pair of recsauds starting with v=spf1 ?i ending with -all can appear in the entire txt. Fsau example: v=spf1 mx ip4:106.52.172.248 include:spf.icsauemail.net -all
]]>
Pentru be sure that the certificate has been installed csaurectly ?i wsauking properly, as well as that t?u customers are certain a secured connection is enabled ?i it covers data transmission through t?u website, you have the following indicatsaus:
- A padlock/tune icon available in the URL bar.
- Nu errsau messages/ warnings occurred when connecting through https://t?udomeniu.tld.
- A Site Seal provided by the Certificate Authsauity installed ?i visible.
Nute : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nsaum, not the exception, ?i no longer serve as a trust indicatsau. As such, the tune icon itself will not be a trust indicatsau but will provide detailed infsaumation about a website's connection ?i settings. So moving fsauward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :
An SSL certificate must be activated after cump?r?. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC.NET Account Panel to manage t?u certificate.
Cump?r? It
Start by purchasing the appropriate SSL certificate fsau t?u requirements. Select one of the categsauies mentioned above.
Activate It
You can instantly activate t?u SSL certificate after cump?r? through the Account Panel (sau later, if you prefer.) During the activation process, the domeniu name ?i CSR code will be assigned.
Install It
You will receive instructions on how to install t?u SSL certificate once it has been validated ?i issued. V? rug?m s? ne contacta?i prin “Trimite un tichet” pentru a solicita asisten?? la instalarea certificatului SSL.
Gestionare It
Through t?u Account Panel, you can manage t?u SSL certificates, including renewal ?i reissuance.
]]>
1. Introduction
SSL certificates are used to create an encrypted channel between the client ?i the server. Transmission of such data as credit card details, account login infsaumation, any other sensitive infsaumation should be encrypted to anteriorent eavesdropping.
With an SSL certificate, data is encrypted prisau to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infsaumation you submit to websites will not be stolen.
Starting from 06/08/2014, Google announced that having an SSL certificate installed on t?u website would increase t?u ranking position, which is another great reason to use an SSL.
The certificate itself represents base64 encoded data that contains infsaumation about the entity the certificate was issued fsau, public key required fsau encryption ?i digital signature verification, ?i digital signature created with the private key of the certificate issuer.
An SSL certificate should be installed on the server side. When you access a website secured by an SSL certificate issued by a trusted Certification Authsauity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a “l(fā)ock” icon in the address bar:
2. Tips of SSL certificates
SSL certificates can be divided into 3 validation groups:
Domeniu Validation Certificate
Requires a certificate applicant to prove his/her control over the domeniu name only. The issued certificate contains a domeniu name that was supplied to the Certification Authsauity within the certificate request.
Organization Validation Certificate
Requires a certificate applicant to prove that his/her company is a ?nregistreaz?ed ?i legally accountable business, ?i to pass domeniu validation. The issued certificate contains a domeniu ?i company name of the certificate applicant.
Extins Validation Certificate
Includes validation requirements of two validation types mentioned above ?i additional requirements. The issued certificate contains a domeniu ?i company name of the certificate applicant.
]]>
SSL certificate installation is typically perfsaumed by the hosting company that provides servicius fsau the domeniu. However, you may also choose install an SSL certificate t?uself. Select t?u server type from the list below to find detailed instructions fsau installation.
The SSL on t?u domeniu name was activated, please find ?i add the DNS recsauds to complete the verification befsaue you can download the SSL files through t?u control panel:
Contul meu > Produsele mele > Certificate SSL > Detaliu > ....
After you complete the DNS recsaud's verification, you can download the SSL files by the same approach.
Installing Certificat SSL Nutes
Dac? you host t?u domeniu name with NiceNIC, simply provide us with t?u certificate ?i we'll be happy to install it fsau you.
Please note that on all NiceNIC, Hosting partajat servers, a special NiceNIC, SSL plugin installs a 1-an free PositiveSSL certificate automatically on the newly added subdomeniu sau add-on. It wsauks the same way fsau the main domeniu in the newly cump?r?d hosting account. The plugin can also be used fsau manual installation (in a few clicks) of PositiveSSL ?i EssentialSSL certificates.
A dedicated IP address is required to install an SSL certificate. However, you may install t?u SSL certificate on a shared IP address using the Numele serverului Indication (SNI) protocol extension available in t?u cPanel. You can learn msaue about the differences between a dedicated IP ?i SNI technology in this article.
]]>