1. Secure, Scaleable, Free
    No Account, just need a DNSSEC-capable domain
    • Only Domain owner can authorize
    Configure domain to use selfdns.org DNS at registrar
    • Only Domain owner can issue zones
    Must use DNSSEC, must sign with DS key
    • Manage and sign zones privately
    Upload signed zonefiles to DHT when updated
    • Rejects domains and IPs on DNS blocklists
    ⛔ Spam and malware sites stop resolving when listed
  2. DNSSEC Required
    Zonefile signature confirmed with key set at registrar
    • Only compatible with DNSSEC-capable registrars (.org, .com, etc)
    • Authoritative DNS Serving
    Links your domain to your servers via your zonefile
    • Dynamic DNS
    Your zonefile updates your DNS when your IP changes
    • Automatic immediate external IPv4 and v6 determination
  3. Central TLS provisioning done at home
    Let's Encrypt TLS certs for any subdomains
    • Secure, remote Automatic TLS updates
    Auto-update remote servers when tls certs updated
    • DANE links our tls cert to DNS for extra security
  4. DHT propagates DNSSEC signed zonefiles
    DHT upload and propagation confirms signature from DS key
    • Trusted authoritative DNS dedicated servers
    Also confirms signature with registrar DS key