Sign in

v1

latestOpenAPI 3.0.2cPanel License2026-08-06657427.1 MB
DNSSEC
DNS Security

Update domain to use NSEC3

This function configures the domain to use Next Secure Record 3 (NSEC3) semantics.

Important:

When you disable the DNS role, the system disables this function.

get/DNSSEC/set_nsec3

Query parameters

domainstring domain required
Example:example.com

The domain on which to enable NSEC3 semantics.

nsec3_iterationsinteger required
Example:7

The number of times that the system re-executes the first resource record hash operation.

nsec3_narrow0 | 1 required
Example:1

Whether NSEC3 will operate in Narrow mode or Inclusive mode. In Narrow mode, PowerDNS sends out white lies about the next secure record. Rather than query the resource record in the database, PowerDNS sends the hash plus 1 as the next secure record.

  • 1 - Narrow mode. * 0 - Inclusive mode.
nsec3_opt_out0 | 1 required

Whether the system will create records for all delegations.

  • 1 - Create records for all delegations.
  • 0 - Create records only for secure delegations.

Note:

Only select 1 if you must create records for all delegations.

nsec3_saltstring hex required
Example:1A2B3C4D5E6F

The salt value that PowerDNS uses in the hashes. For more information about the salt value, read the RFC 5155 documentation.

Note:

In cPanel & WHM version 132 and later, this parameter also accepts the literal value - to indicate no salt value.

Response

HTTP Request was successful.

apiversioninteger

The version of the API.

funcstring

The name of the method called.

modulestring

The name of the module called.

Example response

{
  "apiversion": 3,
  "func": "set_nsec3",
  "module": "DNSSEC",
  "result": {
    "data": {
      "enabled": {
        "example1.com": 1
      }
    },
    "status": 1
  }
}