Task #1478

Updated by Florian Effenberger almost 2 years ago

We should look into migrating to hosting our own DNS incl. DNSSEC.
Florian privately made some good experiences with (signing is super-easy, they just lack an API for zones which we haven't used anyways in the past)
There's a sponsoring offer on the table for backup DNS.
An idea would be to have core-networks as main DNSSEC provider, and take advantage of the sponsoring offer as mirror/fallback (secondary zone with AXFR).
I'd start with less-prominent domains first to gain some experience.
I would, contrary to the initial scope of the ticket, *not* consider hosting DNS on our own.