Azure DNS - Feature request for DNSSEC support

%3CLINGO-SUB%20id%3D%22lingo-sub-2740439%22%20slang%3D%22en-US%22%3EAzure%20DNS%20-%20Feature%20request%20for%20DNSSEC%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2740439%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%0A%3CP%3EI%20am%20not%20sure%20is%20this%20good%20place%20where%20to%20submit%20feature%20request.%3CBR%20%2F%3EI%20am%20using%20a%20lot%20service%20%22Azure%20DNS%22%20and%20I%20hope%20that%20Microsoft%20will%20implement%20new%20feature%20%2F%20support%20for%20DNSSEC.%20Where%20to%20submit%20this%20feature%20request%20and%20hope%20for%20progress%20%2F%20response%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fdns%2Fdns-faq%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EFAQ%20-%20Azure%20DNS%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26gt%3B%26nbsp%3BDoes%20Azure%20DNS%20support%20DNSSEC%3F%3C%2FP%3E%0A%3CDIV%20class%3D%22content%22%3E%0A%3CP%3E%26gt%3B%20No.%20Azure%20DNS%20doesn't%20currently%20support%20the%20Domain%20Name%20System%20Security%20Extensions%20(DNSSEC).%3C%2FP%3E%0A%3CP%3EThe%20DNSSEC%20feature%20is%20tracked%20in%20the%20Azure%20DNS%20backlog.%20Use%20the%20feedback%20site%20to%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F217313-networking%2Fsuggestions%2F13284393-azure-dns-needs-dnssec-support%22%20data-linktype%3D%22external%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Eregister%20your%20support%20for%20this%20feature%3C%2FA%3E.%3C%2FP%3E%0A%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2838509%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20DNS%20-%20Feature%20request%20for%20DNSSEC%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2838509%22%20slang%3D%22en-US%22%3EDNSSEC%20support%20in%20Azure%20DNS%20will%20come%20as%20it%20is%20a%20requirement%20for%20Microsofts%20own%20plans%20to%20provide%20DANE%2FTLSA%20support%20for%20inbound%20e-mail%20in%20Exchange%20Online%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fexchange-team-blog%2Fsupport-of-dane-and-dnssec-in-office-365-exchange-online%2Fba-p%2F1275494%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fexchange-team-blog%2Fsupport-of-dane-and-dnssec-in-office-365-exchange-online%2Fba-p%2F1275494%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EHowever%2C%20they%20seem%20to%20face%20major%20delays%20here%20(probably%20due%20to%20Corona%20virus)%20as%20their%20original%20plan%20was%20to%20enable%20DANE%20for%20outbound%20e-mails%20by%20the%20end%20of%202020%20already%20(current%20plan%20is%20end%20of%202021%3A%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fmicrosoft-365%2Froadmap%3Fsearchterms%3D63212%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fmicrosoft-365%2Froadmap%3Fsearchterms%3D63212%3C%2FA%3E).%3CBR%20%2F%3E%3CBR%20%2F%3EI%20suspect%20that%20DNSSEC%20in%20Azure%20DNS%20will%20need%20at%20least%20another%206%20month%20and%20services%20like%20DANE%20for%20inbound%20e-mail%20in%20Exchange%20Online%20yet%20another%206-12%20month.%3C%2FLINGO-BODY%3E
MVP

Hello,

I am not sure is this good place where to submit feature request.
I am using a lot service "Azure DNS" and I hope that Microsoft will implement new feature / support for DNSSEC. Where to submit this feature request and hope for progress / response?

 

FAQ - Azure DNS | Microsoft Docs

> Does Azure DNS support DNSSEC?

> No. Azure DNS doesn't currently support the Domain Name System Security Extensions (DNSSEC).

The DNSSEC feature is tracked in the Azure DNS backlog. Use the feedback site to register your support for this feature.

1 Reply

DNSSEC support in Azure DNS will come as it is a requirement for Microsofts own plans to provide DANE/TLSA support for inbound e-mail in Exchange Online:
https://techcommunity.microsoft.com/t5/exchange-team-blog/support-of-dane-and-dnssec-in-office-365-e...

However, they seem to face major delays here (probably due to Corona virus) as their original plan was to enable DANE for outbound e-mails by the end of 2020 already (current plan is end of 2021: https://www.microsoft.com/microsoft-365/roadmap?searchterms=63212).

I suspect that DNSSEC in Azure DNS will need at least another 6 month afterwards and services like DANE for inbound e-mail in Exchange Online yet another 6-12 month.

 

That being said, you might be lucky to see Azure DNS with DNSSEC support mid of 2022 (just my own opinion, I could be totally wrong here as well).