8 min
Set up DNSSEC on Plesk with the DNSSEC extension
Sign Plesk-hosted zones with the DNSSEC extension — pick an algorithm, set KSK and ZSK rollover policy, publish DS records, verify the chain, and unsign without SERVFAIL.
2026-09-25
7 min
CVE-2026-33278: the cpanel-unbound DNSSEC RCE, and how to check for it
A critical Unbound DNSSEC validator bug shipped as cpanel-unbound puts remote code execution one malicious signed zone away, no login required. Patched builds and how to check exposure.
2026-08-17
8 min
Enable DNSSEC for cPanel-hosted zones without breaking resolution
A working DNSSEC rollout for cPanel — enable per-zone signing, publish the DS record at your registrar, verify with dig, and survive the first key rollover without going dark.
2026-05-17