Using DNS TXT records for specifying Domain Approver emails

Oct 11, 2024

Using DNS TXT records for specifying Domain Approver emails


We introduced support for using DNS TXT records for specifying domain approver emails in September 2024.  For Customers wanting to use email to approve domains, we strongly encourage you to create DNS TXT records with the desired approver email address, especially customers who have historically relied on using WHOIS contacts.

When the set of constructed email addresses (‘admin’, ‘administrator’, ‘webmaster’, ‘hostmaster’, or ‘postmaster’ @domain.com) can’t be used, we strongly recommend that customers create a DNS TXT records with the desired approver email addresses. This is a one-time action and then that email address can be used to approve and renew the domain until this DNS TXT records is updated or removed.

 

The technical specification is:

The RDATA Value of this TXT record MUST be a valid email address as defined in RFC 6532, Section 3.2, with no additional padding or structure as shown in the image below, else it cannot be used. 

 

Procedure

Go to DNS provider and select the domain you’d like to add an approver email for and then you’ll want to add a DNS ‘TXT’ record for that domain, then enter “_validation-contactemail” in the ‘Host Name’ field and enter the desired email address into the "value" field.

Note: This is an example of a DNS Manager page. The user interface may be different depending on the Domain Manager. 

 

 

Related Articles

GlobalSign System Alerts

View recent system alerts.

View Alerts

Atlas Discovery

Scan your endpoints to locate all of your Certificates.

Sign Up

SSL Configuration Test

Check your certificate installation for SSL issues and vulnerabilities.

Contact Support