# About IPv6, SPF, CAA, DNSSEC, etc? **URL:** \ **Category:** Support\ **Tags:** netlify-dns-https-ssl\ **Created:** [September 14, 2019, 4:04am UTC](https://answers.netlify.com/t/about-ipv6-spf-caa-dnssec-etc/3464 "2019-09-14T04:04:19Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![BayuAngora](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/bayuangora/32/2295_2.png) [@BayuAngora](https://answers.netlify.com/u/BayuAngora)\ **Post date:** [September 14, 2019, 4:04am UTC](https://answers.netlify.com/t/about-ipv6-spf-caa-dnssec-etc/3464/1 "2019-09-14T04:04:19Z")
![IMG_20190914_105419](https://global.discourse-cdn.com/netlify/original/2X/9/9622fb45b98446018afe6016cdf67e38ef42a76b.jpeg) ![IMG_20190914_105401](https://global.discourse-cdn.com/netlify/original/2X/6/693e2277e50ff5ff50a6f18f3298fc6dfe214d47.jpeg) Dear All Previously I use WordPress hosting integrated with Cloudflare. So, I can activate SPF, CAA, DNSSEC, etc, easily. Now, I moved my website to Hugo integrated with Netlify. How to activate SPF, CAA, DNSSEC, etc, on Netlify? Also how to activate IPv6 DNS server (not only IPv6 web server) like on attachment above? Regards ---
**Author:** ![BayuAngora](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/bayuangora/32/2295_2.png) [@BayuAngora](https://answers.netlify.com/u/BayuAngora)\ **Post date:** [September 14, 2019, 4:34am UTC](https://answers.netlify.com/t/about-ipv6-spf-caa-dnssec-etc/3464/2 "2019-09-14T04:34:10Z")
![gp](https://global.discourse-cdn.com/netlify/original/2X/7/7ec3e1b2f8b384309c005cf0c16320cdb0f0982e.jpeg) Update: I can activate CAA and SPF easily via DNS records. But I still curious how to activate IPv6 DNS server and DNSSEC on Netlify? > **[Enabling DNSSEC for a primary (or non-secondary) zone](https://help.ns1.com/hc/en-us/articles/360022247233-Enabling-DNSSEC)** > > The Domain Name System Security Extensions (DNSSEC) is a set of enhancements to standard DNS functionality. Due to the decentralized and hierarchical nature of DNS, a malicious actor can modify (or... ---
**Author:** ![zsoltsandor](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/zsoltsandor/32/11242_2.png) [@zsoltsandor](https://answers.netlify.com/u/zsoltsandor)\ **Post date:** [September 16, 2019, 11:47am UTC](https://answers.netlify.com/t/about-ipv6-spf-caa-dnssec-etc/3464/3 "2019-09-16T11:47:51Z")
You can use Cloudflare with Netlify combined, it works for me, just don’t use Cloudflare’s proxy. You can still use some of the Cloudflare extras, I think. 🙂 However. Up until yesterday, I had perfect scores for both my [zsoltsandor.me](http://zsoltsandor.me) and my [www.zsoltsandor.me](http://www.zsoltsandor.me) at the internet.nl test. Today, www is not giving me a good score, apparently something had happened with NETLIFY’s DNSSEC, I can’t think of anything else. The results for the [zsoltsandor.me](http://zsoltsandor.me) test: [Website test: zsoltsandor.me](https://en.internet.nl/site/zsoltsandor.me) The results for the [www.zsoltsandor.me](http://www.zsoltsandor.me) test: [Website test: www.zsoltsandor.me](https://en.internet.nl/site/www.zsoltsandor.me) Also some other tests: > **[DNSSEC Analyzer - zsoltsandor.me](https://dnssec-analyzer.verisignlabs.com/zsoltsandor.me)** > > The DNSSEC Analyzer from VeriSign Labs is an on-line tool to assist with diagnosing problems with DNSSEC-signed names and zones. [http://dnsviz.net/d/zsoltsandor.me/dnssec/](http://dnsviz.net/d/zsoltsandor.me/dnssec/) For the www: > **[DNSSEC Analyzer - www.zsoltsandor.me](https://dnssec-analyzer.verisignlabs.com/www.zsoltsandor.me)** > > The DNSSEC Analyzer from VeriSign Labs is an on-line tool to assist with diagnosing problems with DNSSEC-signed names and zones. [http://dnsviz.net/d/www.zsoltsandor.me/dnssec/](http://dnsviz.net/d/www.zsoltsandor.me/dnssec/) The problem seems to be on Netlify’s side: > **[DNSSEC Analyzer - zsoltsandor.netlify.com](https://dnssec-analyzer.verisignlabs.com/zsoltsandor.netlify.com)** > > The DNSSEC Analyzer from VeriSign Labs is an on-line tool to assist with diagnosing problems with DNSSEC-signed names and zones. [http://dnsviz.net/d/www.zsoltsandor.me/dnssec/](http://dnsviz.net/d/www.zsoltsandor.me/dnssec/) Results for Netlify itself: > **[DNSSEC Analyzer - netlify.com](https://dnssec-analyzer.verisignlabs.com/netlify.com)** > > The DNSSEC Analyzer from VeriSign Labs is an on-line tool to assist with diagnosing problems with DNSSEC-signed names and zones. [http://dnsviz.net/d/netlify.com/dnssec/](http://dnsviz.net/d/netlify.com/dnssec/) Could admins, service team, whomever look into this? Thanks in advance! 🙂 ---
**Author:** ![BayuAngora](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/bayuangora/32/2295_2.png) [@BayuAngora](https://answers.netlify.com/u/BayuAngora)\ **Post date:** [September 16, 2019, 2:17pm UTC](https://answers.netlify.com/t/about-ipv6-spf-caa-dnssec-etc/3464/4 "2019-09-16T14:17:35Z")
Current I only use CAA, SPF, DMARC, etc. The score can be checked here → > **[Hardenize: Comprehensive web site configuration test](https://www.hardenize.com/?host=angora.me&ec=not_available)** > > Hardenize provides a comprehensive and free assessment of web site network and security configuration. But I don’t know how to fix IPv6 DNS issue above? ---
**Author:** ![zsoltsandor](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/zsoltsandor/32/11242_2.png) [@zsoltsandor](https://answers.netlify.com/u/zsoltsandor)\ **Post date:** [September 16, 2019, 2:45pm UTC](https://answers.netlify.com/t/about-ipv6-spf-caa-dnssec-etc/3464/5 "2019-09-16T14:45:08Z")
My domain registrar is Gandi, my NS provider is Cloudflare. I get the settings for DNSSEC from Gandi, and Cloudflare provides a convenient way of setting it up for the DNS file. I even have my DANE settings in place for my domain. It needed some digging for the information, and the keys, but I was able to set it up correctly apparently, and it is as valid as it can be. Tested by [hardenize.com](http://hardenize.com), it looks perfect: [Hardenize: Comprehensive web site configuration test](https://www.hardenize.com/report/zsoltsandor.me/1568644262) (I will attend to the missing bits and pieces.) ---
**Author:** ![BayuAngora](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/bayuangora/32/2295_2.png) [@BayuAngora](https://answers.netlify.com/u/BayuAngora)\ **Post date:** [September 17, 2019, 7:29am UTC](https://answers.netlify.com/t/about-ipv6-spf-caa-dnssec-etc/3464/6 "2019-09-17T07:29:34Z")
> **[intoDNS: zsoltsandor.me - check DNS server and mail server health](https://intodns.com/zsoltsandor.me)** > > intoDNS: Checking health and configurtion of DNS server and mail server for domainzsoltsandor.me. You use Cloudflare for DNS and use Netlify for CDN and SSL, right? How you set SSL (crypto) on Cloudflare dashboard? Set it off or flexible? [https://ip6.nl/#!zsoltsandor.me](https://ip6.nl/#!zsoltsandor.me) Also you get good score on the checker above. Is that from Cloudflare DNS too?