Before you begin
Check the registrant and administrative contact details before requesting an operation on a .ma domain.
Configuring DNSSEC on a .ma domain name helps protect domain name resolution.
What is DNSSEC?
The DNS protocol translates domain names into IP addresses, but how can the returned address be authenticated? An attacker may forge a DNS response or poison a DNS cache, sending users to a malicious website while the legitimate domain appears in the address bar. DNS Security Extensions DNSSEC authenticates signed DNS answers. Record-set signatures are checked using DNSKEY keys and a chain of trust. It does not encrypt web traffic and requires consistent zone and registry configuration.
Implementing DNSSEC for a .ma domain name or another extension requires several parties to cooperate along the chain of DNS servers . This can make management more complex. To implement DNSSEC for a domain registered with CAP CONNECT, contact our technical support
Key points
Check the applicable requirements and forms with the .ma registry and CAP CONNECT. Changing DNS, transferring between providers and changing the registrant are different procedures.
Reference documentation:
Sources accessed on October 11, 2026. Available features depend on your hosting version and options.
