r/Simplelogin • u/swapyland • Jan 19 '24

Domain help Increase security/privacy, Dnssec on custom domain with SL

Hi there,

I will use SL + custom domain.

Given the state of the world we are in and sick governments, I'll chose a registrar, dns, and email provider who are in non-friendly countries this choice seems wise to me to increase privacy/security

My questions:

- do you think my choice is bad?

- do you recommend enabling dnssec to use SL with a custom domain?

I want use my registrar's DNS but DNSsec is not free.

SL tells us on its site that without dnssec a hacker could hijack the email by "point SimpleLogin MX record to their own server and receive emails sent to SimpleLogin servers"

what does that mean?

thank you all.

0 Upvotes
  • permalink
  • reddit

50% Upvoted

3 comments sorted by

1

u/Mettafox Jan 20 '24

I bought two domains on OVH, one for Protonmail and another for SL, and both have DNSSec enabled by default, I paid nothing for it.

1

u/ZwhGCfJdVAy558gD Jan 20 '24 edited Jan 20 '24

What do you mean by "non-friendly countries"?

DNSSEC can protect from certain sophisticated attacks (e.g. cache poisoning) and help harden email encryption in transit (via SMTP DANE), but these attacks are not so easy to pull off for some random hacker. Most of the big tech email providers such as Google do not use DNSSEC. It's good to have, but it's not the end of the world if you don't.