deSEC – Free Secure DNS • Hacker News Board

Recently migrated to deSEC, great experience so far, except for hitting the API rate limit when using Tofu to plan and apply changes with around a 100 domains. For now I'm using `-parallelism=1` which seems to work.

Re: deSEC – Free Secure DNS

#8

Post by thesuitonym » Fri, Sep 04, 2026, 6:04 PM UTC

0l wrote: post #5

ak4153 wrote: post #4

Just use unbound

Completely different thing

What is this if not a DNS service?

Re: deSEC – Free Secure DNS

#9

Post by traceroute66 » Fri, Sep 04, 2026, 6:08 PM UTC

Stitch4223 wrote: post #2

We found deSEC to be the only affordable DNS supplier in the EU that complies with state of the art secure DNSSEC. Highly recommended.

> We found deSEC to be the only affordable DNS supplier in the EU that complies with state of the art secure DNSSEC.

I mean, if your definition of "affordable" is free, then sure.

But for the record there are other affordable EU suppliers who do DNSSEC:

    - Bunny DNS[0] is "free" – i.e. only subject to their minimum $1/month account spend fee.
    - RcodeZero is very affordable[1] plus added bonus it is run by the `.at` registry so the infrastructure is solid – business customers only, no private individuals
    - Netnod (only via resellers[2] unless you are a big company or government) – Netnod host the I Root Servers and their public hosting DNSSEC service will soon feature HSM-bound DNSSEC keys

[0] https://bunny.net/dns/ [1] https://www.rcodezero.at/solutions/enterprise [2] https://www.netnod.se/dns/find-a-partner

Re: deSEC – Free Secure DNS

#10

Post by anonymousiam » Fri, Sep 04, 2026, 6:09 PM UTC

Seems legit, but how can I trust them to survive if they're not collecting revenue?