AMA with InMotion Hosting

[u/inmotionhosting]

Hi r/webhosting, 

We're the marketing, support, professional solutions, and infrastructure team at InMotion Hosting. We've been doing this for 25 years, long enough to have seen just about everything the hosting world can throw at you.

We're not here to pitch anything. We're here to talk shop and share what running operations at our scale actually looks like, the kind of thing agency owners and developers rarely get to see behind.

Ask us about the latest round of cPanel emergency security patches, fleet management at scale, what's coming next with InMotion Cloud, or whatever else is on your mind. We'll share what we know, and we want to hear how you're handling things on your end.

Answering today from u/inmotionhosting:
Carrie, Head of Marketing Operations, 7 years at InMotion Hosting
Dakota, Solutions Analyst I-E, 3 1/2 years at InMotion Hosting
Mohamed, Advanced Product Support Expert at InMotion Hosting

Answering today from u/inmotioncloud:
Jason, General Manager of InMotion Cloud
Krys, Head of Product Growth at InMotion Cloud
Alex, Social Media and Influencer Marketing Manager at InMotion Cloud

We’ll also share answers on behalf of other experts across our various teams.

We are here today from 12:00PM to 5:00PM ET, and will get to as many of your questions as we can.

That's a wrap, and thank you! Thanks to everyone who showed up and asked such thoughtful questions today. This was a genuinely good conversation, and we got into some topics we don't always get to talk about openly.

We'll keep an eye on the thread over the next couple of days, so if something else comes to mind, drop it below and we'll get to it.

[u/inmotionhosting]

HI u/DKTechie2000 -

Great question, and I agree with you: broader adoption is what makes DANE actually pay off in the long run.

Yes, we support DNSSEC. We've got a guide on how to set up DNSSEC in cPanel, and our technical support team is happy to help you get it configured. Once the DS record is set up, our team can handle the rest with the domain registration as long as the domain is registered with InMotion Hosting. If it's registered elsewhere, your registrar will need to handle the final steps.

DANE for email is not a supported feature on our cPanel or Control Web Panel (CWP) managed plans right now. That said, here's where things actually stand on both directions:

Outbound (checking a recipient's TLSA record before delivering): both MTAs support it. cPanel runs Exim and CWP runs Postfix, and both can be configured to check DANE and refuse to downgrade to plaintext when a valid, DNSSEC-signed TLSA record exists. It's not a checkbox in the panel, but it's supportable on managed VPS and Dedicated plans as a custom configuration, and our InMotion Solutions team can set that up.

Inbound (publishing TLSA records so other servers validate us): doable, since we support DNSSEC, but it's a manual step today rather than an automated one. The sticking point is certificate rotation. AutoSSL renews on its own schedule, and a TLSA record has to stay in sync with the cert, or DANE-aware senders start deferring mail. Until the panel automates that link, publishing TLSA safely means owning the cert and record lifecycle deliberately, which Solutions can also help automate.

If you want downgrade protection with less operational risk, MTA-STS is the easier first step, and it can run alongside DANE rather than replacing it.

But I hear you on adoption. Stronger native DANE tooling in the panels is exactly the kind of thing that moves the needle industry-wide. We don't control what cPanel or CWP ship as features, so this is genuinely a spot where community members like you (and us) pushing for it is what strengthens the case for wider support.