RFC 2136 Dynamic Updates Overview¶
HexDNS supports updates to the zone via DNS UPDATE messages (as defined in RFC2136).
All update requests to HexDNS must be signed with TSIG. TSIG secrets can be managed be clicking the Edit update secrets button on the zone page.
The supported HMAC algorithms are:
- HMAC MD5
- HMAC SHA-1
- HMAC SHA-256
- HMAC SHA-384
- HMAC SHA-512
Danger
We'll honour whatever HMAC is used te sign the incoming request for the response, however SHA-1 is strongly advised against, and MD5 doubly so.