This year, all owners of .ch domains need to switch from the DNS registry SWITCH to a new registrar. Getting an overview over these registrars is hard. Thankfully, Marc Wäckerlin has started the road to transparency with a price comparison of Swiss .ch domain registrars. Here, I extend his results with a survey of DNSSEC support.
Update: Information received after 2 April 2015 is only reflected in the German table!
Transparency is especially important in a market for digital goods, as many of their properties will only become known after having been paid for.Â For example, whether a registrar supports DNSSEC will only be known once you have transferred domains thereand tried to register the necessary
DNSKEY records. By then, you have already paid your fees or maybe even lost existing DNSSEC-related records.
As I wanted to be able to continue to use my DNS records containing SSHFP or TLSA entries (for DANE), I needed a registrar with DNSSEC support. Few of them had any information in their FAQ, so I started asking them on their support channels. I based my survey on the excellent price comparison by Marc Wäckerlin.
The result of the responses is shown below. The “DNSSEC” column and the underlined parts are mine, the rest is translated verbatim from Marc Wäckerlin’s table.
|Acribis (via INWX)||Web interface||12.00|
|Firestorm||Manual (Web interface starting Easter)||13.00||First year 8.00 â€“ lure, regular price hidden in footnote|
|switchplus.ch||Manual (Web interface starting 2016)||15.50|
|Hosttech||in the works||10.70|
|rhone.ch||planned (this week)||13.80|
|Amenic||planned (in the next few weeks)||14.90|
|Hostfactory (OptimaNet)||Nein||15.00||First year free â€“ properly declared|
|Green||(still in discussion with their support)||14.50|
|MHS||?||15.50||Price hidden in FAQ|
|domainpartner.ch (ITF)||?||15.50||Price well hidden|
I was astonished to learn that SWITCHplus does not support DNSSEC anytime soon, even though its parent company SWITCH has been offering this for years.
I performed this survey on the evenings of 30th of March (between 10pm and 11pm) and 31st of March (between 5pm and 7pm). Two companies, namely Q-X and Centinated, responded within few minutes, even though my query arrived after 10pm! Companies without response after more than 48 hours can be identified by the question mark in the DNSSEC column. Of course, response times should be viewed as snapshots only and cannot be generalized to response time for other requests.