D
deSEC e.V.
desec.org
TechnologyGermanysmallMEDIUM deSEC e.V. is a non-profit organization based in Berlin, Germany, providing a free, secure DNS hosting service designed with security and privacy in mind. The service leverages open-source software and is supported by reputable organizations such as ICANN, NLnet Foundation, RIPE NCC, and the European Union. Their platform offers modern DNS features including DNSSEC with elliptic-curve cryptography, cloud integrations, a REST API, multi-factor authentication, and a global Anycast network to ensure high availability and performance.
Technically, the website is built as a modern single-page application using Vue.js and Vuetify, ensuring excellent mobile optimization, accessibility, and fast performance. The DNS service infrastructure is robust, supporting advanced DNS record types and seamless integration with popular tools like Let's Encrypt. The domain registration is consistent with the organization's claims, with a long registration history and no privacy protection, indicating transparency.
From a security perspective, deSEC demonstrates strong practices such as enforced DNSSEC signing, multi-factor authentication, and domain status protections. However, there is room for improvement in publishing explicit security policies, incident response procedures, and implementing security headers. Privacy compliance is well addressed with a comprehensive privacy policy, though a cookie consent mechanism is absent.
Overall, deSEC presents a trustworthy, professional, and technically mature service with a strong focus on security and privacy. The organization’s non-profit status and transparent operations further enhance its credibility. Strategic recommendations include enabling DNSSEC at the registrar level, adding security headers, and publishing incident response information to strengthen security posture and compliance.
dnsdnssecopensourcenon-profitsecurity+3 more JavaScript (ES Modules)Vue.js (Vuetify framework)REST APIElliptic-curve cryptography for DNSSEC+1
