What's New

Adding a domain now deploys it to our nameservers right away, so registries that check the new nameservers before accepting a change (such as punktum.dk for .dk domains) approve the switch on the first try. Previously the domain only went live after a manual deploy, and a nameserver change requested before that was rejected. Record edits are still staged until you deploy them, as before. We also now catch typos in the domain ending when a domain is added, instead of accepting names that can never resolve.

If we temporarily disable a hostname on our side, the update service now answers your router or update client with a retryable error instead of a code that makes well-behaved clients stop permanently. Once the hostname is re-enabled, updates resume on their own with no reconfiguration needed. Rate-limited hostnames still get the hard stop, so misconfigured clients back off.

When you add a dynamic DNS record, the IP field is now prefilled with the address you are connecting from, so the hostname resolves right away instead of pointing nowhere until your first update. You can still change or clear it if the client that keeps the record updated runs on a different machine.

Records that a domain inherits from a template used to show as a read-only "Inherited" row with nothing you could do to them. Your templates are yours too, so each inherited record now has an "Edit in template" button that takes you straight to it. Editing there updates every domain that uses the template.

After enabling DNSSEC, the DNSSEC panel now has a "Verify signing on all nameservers" button. It confirms every one of your nameservers is actually serving the signatures before you add the DS record at your registrar, so you never publish a DS while a nameserver is still catching up. We also keep an eye on signed domains automatically and alert us if one stops serving signatures.

The domain page had grown crowded: records, email security, DNSSEC and the activity log all shared one long scroll. Each domain now has four focused tabs instead: Records (the default), Security for email security and DNSSEC, Activity for the change log, and Settings. A compact status strip at the top shows sync, email security and DNSSEC state on every tab, so nothing important is ever out of sight. The record list itself got a matching refresh: cleaner group headers you can operate from the keyboard, and calmer styling throughout.

Webhooks now have proper documentation. The FAQ explains how to add a webhook, which events can trigger one (IP changes, record changes, health check and sync failures), how to verify deliveries with the signature header, and why a failing webhook gets disabled. The API docs cover the delivery format, signature verification, and the /api/v1/webhooks endpoint.

If your domain receives mail through Apple iCloud Mail (custom email domain), the SPF & DMARC wizard now detects it from your MX records and pre-selects the right SPF setting. The Email Security status has also moved below the record list once everything is configured, so your records come first.

Your domains list and each .dk domain page now show the domain's current registrar. With Punktum's new rules requiring every .dk domain to be managed through a reseller, this makes it easy to see where your registration sits, while your DNS stays right here with us.

You can now read exactly how we handle your data: a privacy policy at /privacy covers what we collect, why, how long we keep it, and your rights under the GDPR. The FAQ has a matching Privacy & Your Data section — no tracking or advertising cookies, all data processed within the EU, and you can access, export, or erase your data by email.