Specific ccTLDs: Nameservers

.DE-Domains 

 

 In case you want to  use your own/external name servers for your . DE-domains instead of the standard name servers from Joker.com, you have to make sure that these name servers are compliant with the requirements set by the DENIC .   

 Requests to register or update .de domains are handled by a robot doing the following checks on the registry side : 

 

 are all name servers given in the request reachable? 

 are they authoritative? 

 do their answers contain the "authoritative answer" (AA) bit and do they know about the other authoritative name servers? 

 are all authoritative nameservers given in the request? 

 

 are values in the SOA record s in the ranges required by the DENIC? 

 

 

 are the SOA values identical for all name servers? 

 

 

 do at least two of the three name servers differ in the first three bytes of the IP (v4) address? 

 

 

 Name Server: SOA Records 

   

 SOA stands for " Start of Authority ".  

 An SOA record is the part of a DNS zone containing the email of the responsible person of the zone, and various synchronization parameters used by the different name servers of the zone. 

 Requests to register or update .DE domains must contain SOA values in the following ranges: 

 

 

 

 

 

 

 SOA-Record 

 Value 

 

 

 serial recommended format 

 YYYYMMDDnn 

 

 

 refresh 

 [10000 ... 86400] 

 

 

 retry 

 [1800 ... 28800] 

 

 

 expire 

 [604800 ... 3600000] 

 

 

 

 ttl   

 

 [180 ... 345600] 

 

 

 

 

 

 If you are not sure, if your nameservers are compliant with DENIC requirements, or get an error related to nameservice, please check your nameservers at https://nast.denic.de/ 

 

 .DK-Domains 

 Nameserver change 

 The process of changing the nameserver for .dk domains is specifically regulated by DK Hostmaster. To modify the nameserver associated with a .dk domain, it is mandatory to go through DK Hostmaster's designated platform at: 

 https://self-service.dk-hostmaster.dk/domain/change_name_server 

 When you navigate to the aforementioned website, you will find a user-friendly interface designed to assist domain owners in updating their nameserver information. This process ensures that only authorized individuals with the appropriate access can make modifications to the nameservers associated with .dk domains. By centralizing this function through DK Hostmaster, they maintain control and oversight over the nameserver settings for all .dk domains, helping to ensure the security, stability, and integrity of the Danish domain space. 

 Important: If your .dk domain has never used Joker.com nameservers - for example, if you just transferred it to us while still using old external/foreign nameservers—you must create a DNS zone before switching to Joker.com nameservers at DK Hostmaster (Punktum) . To activate a zone, simply create a virtual zone or add any DNS record in the DNS editor (even a placeholder TXT record is sufficient). Once a zone exists, you can successfully update your nameservers at Punktum. 

 

 Adding DNSSEC 

 If you use Joker.com nameservers 

 Activating DNSSEC for your .dk domain is a two-step process : 

 

 

 Activate DNSSEC in the Joker.com DNS Editor 

 

 

 Go to the DNS Editor (not the Modify section as you would normally do). 

 

 

 Enable the DNSSEC switch. 

 

 

 This generates the necessary DNSSEC keys. 

 

 

 

 

 Import DS records at DK Hostmaster (Punktum) 

 

 

 Log in to your account at Punktum. 

 

 

 Open the DNSSEC section and choose “Import DNSSEC keys.” 

 

 

 Select all keys , or at least those using SHA-256 or SHA-384 . 

 

 

 Save your changes. 

 

 

 

 

 Afterwards, verify that everything is functioning correctly using the DNSSEC Analyzer 

 If you use foreign nameservers 

 The process is similar: 

 

 

 Activate/enable DNSSEC at your external DNS provider (they will provide the DS records). 

 

 

 Go directly to Punktum and  import the DS records in the DNSSEC management section. 

 

 

 No changes are needed at Joker.com in this case. 

 

 

 Important: The  “Import DNSSEC Keys” page at Punktum does not work reliably in all browsers . If the page freezes or shows no error but doesn't proceed, try a different browser. Microsoft Edge and Google Chrome work consistently. 

 

 .IT-Domains 

 

 Similar to .de domains, .it domain registry has specific requirements for nameservers. 

 It is crucial to verify the compliance of your custom nameservers before registering an .it domain. If your nameservers do not meet the registry requirements, the domain will be  deleted within 30 days . To check the compliance of your nameservers, you can use the following link: 

   https://www.nic.it/en/manage-your-it/dns-check .