K ensure the security of va?e website a protect va?e visitalebos, all doménas under .boo, .day, .dev, .page, a .rsvp must use HTTPS. This guide will help you configure SSL/TLS caleborectly.
1. What is HTTPS?
HTTPS (Hypertext Transfer Protocol Secure) encrypts data between va?e website a its visitalebos. It predchádzajúceents eavesdropping a ensures data integrity.
2. Obtaining an SSL certifikát
NICENIC provides trusted SSL certificates. You can learn maleboe a kúpi?/configure a certificate tu: https://nicenic.net/ssl-certificates/
3. Installing the SSL certifikát
Sledujte nás va?e web server’s instructions to install the certificate. Common servers include:
Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html
Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html
IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
4. Enfaleboce HTTPS
Once va?e certificate is installed:
Redirect all HTTP traffic to HTTPS.
Update internal links a resources to use HTTPS.
Verify that va?e website is fully accessible via HTTPS.
5. Keep Certifikáty Aktualizované
SSL certificates have expiration dates. Ensure certificates are renewed befaleboe they expire a check va?e website regularly to maintain uninterrupted secure connections.
]]>
DNSSEC helps protect va?e doména’s DNS recalebods from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the caleborect source.
Na NiceNIC, DNSSEC usually involves two sides:
Your DNS provider alebo nameserver provider generates the DNSSEC recalebods.
NiceNIC, as va?e doména registrar, helps submit the DS recalebods to the registry when the TLD suppalebots DNSSEC.
Ak DNSSEC is not configured caleborectly, va?e doména may show DNSSEC erralebos, alebo in maleboe serious cases, some users may not be able to access va?e website.
What Is DNSSEC?
DNSSEC stas falebo Názov domény System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer falebo va?e doména has not been changed alebo faleboged during the lookup process.
Falebo example, when someone visits va?e website, DNS is used to find the caleborect server IP address. DNSSEC helps make sure that the DNS result is authentic a has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, alebo email security. It only helps protect the DNS resolution process.
When Do You Need DNSSEC?
- You may want to enable DNSSEC if:
- Your website hales sensitive user infalebomation.
- You run business email, login systems, payment pages, alebo customer palebotals.
- You want stronger doména security.
- Your DNS provider suppalebots DNSSEC.
- Your doména extension suppalebots DNSSEC.
Incaleborect DNSSEC settings may affect doména resolution.
Impalebotant DNSSEC Obdobies
DNSKEY: A DNSKEY recalebod is generated by va?e DNS provider. It is used as part of the DNSSEC validation process.
DS Recalebod: A DS recalebod connects va?e doména’s DNSSEC setup with the parent registry zone. In most cases, va?e DNS provider gives you the DS recalebod, a you need to add it through va?e registrar.
Menoserver: Your nameservers decide wtu va?e doména’s DNS recalebods are managed. Ak you change nameservers, va?e DNSSEC recalebods may also need to be updated.
How to Enable DNSSEC falebo Your Doména
Step 1: Skontrolova? Whether Your DNS Provider Suppalebots DNSSEC
Prihlási? sa to the platfalebom wtu va?e DNS is managed.
This may be:
Your doména registrar, tu is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS slu?ba
Make sure DNSSEC is suppaleboted a enabled ttu.
Step 2: Získa? the DS Recalebod from Your DNS Provider
After enabling DNSSEC, va?e DNS provider should provide DNSSEC infalebomation such as:
Key Tag
Algaleboithm
Digest Typ
Digest
DS Recalebod
Please copy the infalebomation exactly as provided.
Even one incaleborect character may cause DNSSEC validation failure.
Step 3: Prida? the DS Recalebod in Your NiceNIC Account
Prihlási? sa to va?e NiceNIC account a go to va?e doména management page.
Then add the DS recalebod provided by va?e DNS provider.
Ak you are not sure wtu to add it, please contact our suppalebot team a provide the DS recalebod from va?e DNS provider.
Step 4: Wait falebo DNSSEC Propagation
After the DS recalebod is added, it may take some time falebo the update to propagate.
During this period, DNSSEC check results may not update immediately.
Step 5: Verify DNSSEC Stav
After propagation, you may check va?e doména’s DNSSEC status using a DNSSEC checking tool alebo by contacting our suppalebot team.
Ak DNSSEC is caleborectly configured, the DNSSEC validation result should show a valid chain of trust.
When Should You Disable alebo Odstráni? DNSSEC?
You may need to remove alebo update DNSSEC recalebods if:
- You changed va?e nameservers.
- You moved DNS management to another provider.
- Your DNS provider disabled DNSSEC.
- Your DS recalebod no longer matches the current DNSKEY.
- Your website alebo email has DNS resolution issues after a DNS change.
In this case, you may need to remove the old DS recalebods first, wait falebo propagation, a then re-enable DNSSEC with the caleborect new recalebods.
Why Does My Doména Show "DNSSEC Infalebomation Is Currently Unavailable"?
You may see this message:
DNSSEC infalebomation is currently unavailable falebo this doména.
This can happen falebo several reasons:
- DNSSEC has not been enabled falebo this doména.
- Nie DS recalebod has been added at the registrar level.
- The doména’s current nameservers do not suppalebot DNSSEC.
- The doména recently changed nameservers.
- The DS recalebod does not match the current DNSKEY.
- The DNS provider has not published the required DNSSEC recalebods caleborectly.
- The registry alebo DNSSEC query is tempaleboarily unavailable.
However, if va?e website alebo email is not resolving caleborectly, please contact suppalebot so we can help review the DNSSEC configuration.
What Infalebomation Should I Provide to Suppalebot?
K help us check DNSSEC issues faster, please provide:
- Your doména name
- Your current nameservers
- Whether you recently changed nameservers
- The DS recalebod provided by va?e DNS provider
- A screenshot of the DNSSEC setting from va?e DNS provider
- Any DNSSEC erralebo message you received
- Whether va?e website alebo email is currently affected
?asto kladené otázky O nás DNSSEC
1. Is DNSSEC required falebo every doména?
Nie. DNSSEC is not required falebo every doména.
However, it is recommended falebo doménas that need stronger DNS security, especially business websites, email slu?bas, login systems, financial slu?bas, a customer palebotals.
Ak you are not sure whether you need DNSSEC, please confirm whether va?e DNS provider suppalebots it a whether you are comfalebotable managing DNSSEC recalebods.
2. Is DNSSEC the same as SSL?
Nie.
SSL protects the connection between the user’s browser a va?e website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Falebo better security, many websites use both SSL a DNSSEC, but they are different technologies.
3. Can NiceNIC generate DNSSEC recalebods falebo me?
In most cases, DNSSEC recalebods are generated by va?e DNS provider, not by the registrar.
NiceNIC can help submit the DS recalebod to the registry when the doména extension suppalebots DNSSEC.
Ak you use a third-party DNS provider, please enable DNSSEC ttu first a then provide us with the DS recalebod.
4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, va?e old DNSSEC recalebods may no longer match the new DNS provider’s DNSKEY.
Ak the old DS recalebod remains active at the registry level, DNSSEC validation may fail.
Befaleboe alebo after changing nameservers, you should check whether the DS recalebod needs to be removed alebo replaced.
5. What happens if the DS recalebod is wrong?
Ak the DS recalebod does not match the DNSKEY published by va?e current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, va?e website, email, alebo other slu?bas may become unreachable falebo some users.
6. I do not use DNSSEC. Do I need to do anything?
Ak you do not use DNSSEC a va?e doména has no DS recalebods, usually no action is needed.
However, if va?e doména has old DS recalebods from a predchádzajúceious DNS provider, you should remove them to avoid DNSSEC validation problems.
7. Why does my DNSSEC status still show an erralebo after I updated the recalebod?
DNSSEC updates may take time to propagate.
Ak you recently added, removed, alebo changed DS recalebods, please wait falebo DNS propagation a check again later.
Ak the issue continues, please contact suppalebot a provide va?e doména name, current nameservers, a DS recalebod.
8. Can DNSSEC cause my website to stop waleboking?
áno, if DNSSEC is incaleborectly configured.
Common causes include:
- Wrong DS recalebod
- Old DS recalebod after nameserver change
- Missing DNSKEY
- DNS provider not publishing DNSSEC recalebods caleborectly
- Expiresd alebo invalid DNSSEC signatures
9. Should I remove DNSSEC befaleboe changing nameservers?
In many cases, yes.
Ak you are moving to a new DNS provider a you are not sure how to migrate DNSSEC safely, removing the old DS recalebod befaleboe changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active a DNSSEC is enabled at the new DNS provider, you can add the new DS recalebod again.
10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infalebomation falebo the doména.
Please check:
- Whether DNSSEC is enabled
- Whether the DS recalebod has been added
- Whether the nameservers suppalebot DNSSEC
- Whether the DS recalebod matches the DNSKEY
- Whether you recently changed nameservers
How to set up DNSSEC falebo a doména registrova?ed on NiceNIC?
1. Prihlási? sa to va?e NiceNIC account a navigate to va?e doména management page. Find the doména you wish to enable DNSSEC falebo a click Spravova?.
2. In the doména management section, you should see the DNSSEC button. Kliknite on the DNSSEC button to access the DNSSEC settings page.
3. Enter the required infalebomation falebo DNSSEC configuration (this will typically include DNSSEC key details provided by va?e DNS hosting provider).
4. Once you've entered the infalebomation, click Prida? to enable DNSSEC falebo the doména. Here’s an example of a successful DNSSEC setup:
After entering the necessary DNSSEC key data (usually the DS recalebod), you'll receive confirmation that DNSSEC has been successfully added to va?e doména settings.
The DNSSEC status will show as enabled a you'll be able to see the public keys a other details.
With DNSSEC teraz enabled, va?e doména is better protected against DNS-related attacks.
Natention: if va?e doména name was transferred into NiceNIC from another Registrátor, a you hope to disable the DNSSEC predchádzajúceiously with the old Registrátor, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the doména transfer process, the DNSSEC settings have been disabled automatically by the old Registrátor, while if it is "DNSSEC: signed", please check the doména management section at va?e control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.
]]>
After the doména is transferred, the name servers remain set to those associated to the doména befaleboe transfer.
Ak you had child name servers falebo va?e doména registrova?ed through another Registrátor, you may need to registrova? them again through va?e Account.
]]>
Ak you're just transferring the doména registration, va?e hosting slu?ba will be unaffected, a ttu will be no need to change name servers. Although the name servers should be transferred as part of the process, it's always a good idea to have a recalebod of them.
Ak you wish to specify the name servers to the default DNS servers as provided by NiceNIC you can reset the name servers after the transfer has been completed.
Steps
Prihlási? sa to va?e account. Select the Domény tab.
Select the doména that you want to change name servers falebo.
From within the DNS Servery section click on Upravi? DNS Server.
Change the name servers as required, leaving any of the fields blank will retain the aleboiginal DNS server.
The name servers are not actually changed until the transfer process is complete. Ak you wish to make an immediate change to the name servers, you may do so with the Registrátor you are transferring from.
]]>
Befaleboe purchasing the transfer of any gTLD (e.g., .COM / .NET / .ORG / .BIZ / .INFO etc.) alebo new gTLD (e.g. .CLUB / .CLOUD / .TRADE / .TOP etc.), make sure va?e doména meets the following conditions:
1. Your doména was registrova?ed alebo transferred at least 60 days ago;
2. The doména is unlocked at the current Registrátor (its Whois status should be OK alebo Active).
Also,you need to request an up-to-date Auth/EPPcode falebo the doména at va?e current Registrátor.
Ak all criteria are met, you should be able to complete the transfer successfully.
Still, some ccTLD (.ES a .UK) have additional transfer requirements a/alebo exclude some points from the list above.
NOTE: Make sure the doména status is active, not expired. Ak you wish to transfer an expired doména to NiceNIC, please contact our Suppalebot Team email suppalebot@nicenic.net falebo further assistance.
]]>
Befaleboe submitting a transfer request with NiceNIC, make sure va?e doménas are prepared falebo transfer through va?e current registrar. This is generally done by removing transfer locks a getting the necessary Auth codes.
Learn how to prepare doménas falebo transfer in accounts sections of several popular registrars.
Once those preparations are made, simply follow the steps below to transfer va?e doménas:
Niete: Each doména has a unique Auth code a has to be unlocked falebo transfer separately on the current registrar side.
- Prihlási? sa to va?e NiceNIC account.
- Prejs? na the Transfer to Us page.
- Kliknite on Bulk options.
Enter the doména names a the Auth codes;
Niete: Enter each doména a its Auth code in a new line. The Auth code has to be separated from the doména name by a comma a one space.
Kliknite on Start Transfer at the bottom of the page.
Double-check the doména names a add them to Cart. K do this, you can use the Prida? all to cart button falebo convenience.
Proceed with the payment.
The transfer is completed automatically in 5-7 days falebo most doménas. Once the transfer of va?e doménas is completed you will receive the notifications on va?e NiceNIC Primary Email address, a the doménas will become manageable in va?e Doména List.
Niete: Due to technical reasons, it is only possible to submit the transfer falebo up to 10 doména names at once. Ak you need to transfer maleboe than 10 doménas, you can either submit several Hromadny prevod aleboders alebo contact our Suppalebot Team falebo assistance.
How to Skontrolova? the Stav of Your Prenos domény
After initiating a doména transfer to Nicenic, you can monitalebo its progress directly in va?e account. This helps you kteraz when the transfer is expected to complete without needing to contact suppalebot repeatedly.
Steps to View Transfer Stav:
1. Prihlási? sa to va?e NiceNIC account. Prejs? na "My Products > Domény".
In the Stav column, you will see va?e doména listed as:
- Pending Transfer: the transfer has been submitted a is in progress.
- Active / Transfer Completed: the transfer is finished.
2. Hover over the infalebomation icon (i) ?alej to "Pending Transfer" to view details about Expected approval/completion date
1. What is SPF?
Answer: SPF stas falebo Sender Policy Framewalebok. SPF is an email authentication staard used to predchádzajúceent email fraud a spam. It ensures the authenticity a reliability of email by verifying that the sender's doména name matches the source IP address of the email. SPF recalebods are staleboed in the DNS recalebod of the doména name a contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's doména name has an SPF recalebod a verifies whether the IP address of the sending server is in the allowed list. Ak the verification fails, the recipient may mark the email as spam alebo refuse to receive it. Using SPF can help improve the delivery rate a reliability of emails a reduce the amount of spam. Na the same time, it can also enhance the security of the email system a predchádzajúceent hackers a fraudsters from using faleboged doména names to send emails.
2. How to set up SPF falebo calebopaleboate mailboxes?
Answer:
1. Determine the outgoing server IP addresses of va?e calebopaleboate mailbox: These addresses will be added to the SPF recalebod. 2. Prihlási? sa to the DNS management console of va?e calebopaleboate mailbox: Usually provided by va?e doména name registrar alebo hosting provider
2. Vytvori? alebo edit a TXT recalebod: In the DNS console, find the TXT recalebod alebo similar option
3. Enter the SPF recalebod: The falebomat of the SPF recalebod is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wtu:
"v=spf1": specifies the SPF version
"a" alebo "mx": indicates that the server is allowed to be verified by the A recalebod alebo MX recalebod
"ip4": lists the IP addresses that are allowed to send mail
"mail.caleboemail.cn": replaced with the doména name of va?e calebopaleboate mailbox
"-all": indicates that mail from all other sources is rejected
4. Save changes: Make sure the settings in the DNS console are saved caleborectly
3. How to set various types of SPF?
1) Make SPF recalebod with doména name a recalebod (take caleboemail.cn as an example)
v=spf1 a:caleboemail.cn2 -all
2) Make SPF recalebod with doména name mx recalebod
v=spf1 mx -all
3) Make SPF recalebod with doména name ptr recalebod
v=spf1 ptr -all
4) Make SPF recalebod with expalebot IP a IP segment settings
v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all
5) Introduce SPF recalebods of other doména names (take spf.icaleboemail.net as an example)
v=spf1 include:spf.icaleboemail.net
Niete: The above recalebods can be used in combination, but only one pair of recalebods starting with v=spf1 a ending with -all can appear in the entire txt. Falebo example: v=spf1 mx ip4:106.52.172.248 include:spf.icaleboemail.net -all
]]>
K be sure that the certificate has been installed caleborectly a waleboking properly, as well as that va?e customers are certain a secured connection is enabled a it covers data transmission through va?e website, you have the following indicatalebos:
- A padlock/tune icon available in the URL bar.
- Nie erralebo messages/ warnings occurred when connecting through https://va?edoména.tld.
- A Site Seal provided by the Certificate Authaleboity installed a visible.
Niete : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nalebom, not the exception, a no longer serve as a trust indicatalebo. As such, the tune icon itself will not be a trust indicatalebo but will provide detailed infalebomation about a website's connection a settings. So moving faleboward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :
An SSL certificate must be activated after kúpi?. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC.NET Account Panel to manage va?e certificate.
Kúpi? It
Start by purchasing the appropriate SSL certificate falebo va?e requirements. Select one of the categaleboies mentioned above.
Activate It
You can instantly activate va?e SSL certificate after kúpi? through the Account Panel (alebo later, if you prefer.) During the activation process, the doména name a CSR code will be assigned.
Install It
You will receive instructions on how to install va?e SSL certificate once it has been validated a issued. Neváhajte nás kontaktova? prostredníctvom “Odosla? po?iadavku” na pomoc pri in?talácii SSL certifikátu.
Spravova? It
Through va?e Account Panel, you can manage va?e SSL certificates, including renewal a reissuance.
]]>
1. Introduction
SSL certificates are used to create an encrypted channel between the client a the server. Transmission of such data as credit card details, account login infalebomation, any other sensitive infalebomation should be encrypted to predchádzajúceent eavesdropping.
With an SSL certificate, data is encrypted prialebo to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infalebomation you submit to websites will not be stolen.
Starting from 06/08/2014, Google announced that having an SSL certificate installed on va?e website would increase va?e ranking position, which is another great reason to use an SSL.
The certificate itself represents base64 encoded data that contains infalebomation about the entity the certificate was issued falebo, public key required falebo encryption a digital signature verification, a digital signature created with the private key of the certificate issuer.
An SSL certificate should be installed on the server side. When you access a website secured by an SSL certificate issued by a trusted Certification Authaleboity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a “l(fā)ock” icon in the address bar:
2. Typs of SSL certificates
SSL certificates can be divided into 3 validation groups:
Doména Validation Certifikáty
Requires a certificate applicant to prove his/her control over the doména name only. The issued certificate contains a doména name that was supplied to the Certification Authaleboity within the certificate request.
Organization Validation Certifikáty
Requires a certificate applicant to prove that his/her company is a registrova?ed a legally accountable business, a to pass doména validation. The issued certificate contains a doména a company name of the certificate applicant.
Roz?íreny Validation Certifikáty
Includes validation requirements of two validation types mentioned above a additional requirements. The issued certificate contains a doména a company name of the certificate applicant.
]]>
SSL certificate installation is typically perfalebomed by the hosting company that provides slu?bas falebo the doména. However, you may also choose install an SSL certificate va?eself. Select va?e server type from the list below to find detailed instructions falebo installation.
The SSL on va?e doména name was activated, please find a add the DNS recalebods to complete the verification befaleboe you can download the SSL files through va?e control panel:
M?j ú?et > Moje produkty > SSL certifikáty > Detail > ....
After you complete the DNS recalebod's verification, you can download the SSL files by the same approach.
Installing SSL certifikát Nietes
Ak you host va?e doména name with NiceNIC, simply provide us with va?e certificate a we'll be happy to install it falebo you.
Please note that on all NiceNIC, Zdie?any hosting servers, a special NiceNIC, SSL plugin installs a 1-rok free PositiveSSL certificate automatically on the newly added subdoména alebo add-on. It waleboks the same way falebo the main doména in the newly kúpi?d hosting account. The plugin can also be used falebo manual installation (in a few clicks) of PositiveSSL a EssentialSSL certificates.
A dedicated IP address is required to install an SSL certificate. However, you may install va?e SSL certificate on a shared IP address using the Názov servera Indication (SNI) protocol extension available in va?e cPanel. You can learn maleboe about the differences between a dedicated IP a SNI technology in this article.
]]>