[{"data":1,"prerenderedAt":155},["ShallowReactive",2],{"publication:en:P161":3},{"meta":4,"copy":16,"relatedArticles":141,"terms":142,"term":143,"resourceParent":149,"glossaryParent":152},{"id":5,"path":6,"kind":7,"keyword":8,"title":9,"seoTitle":10,"description":11,"incoming":12,"updated":15},"P161","\u002Fglossary\u002Fdns","term","what is DNS","What is DNS? Records, ownership and business services","What is DNS? Records and business ownership","Understand DNS, authoritative servers, common records and caching. Connect domain settings with website, email and service ownership before making changes.",[13,14],"\u002Fservices\u002Fdns-ssl","\u002Fservices\u002Femail-domains","2026-10-30",{"intro":17,"sections":18,"checklistTitle":95,"checklist":96,"faq":104,"sources":114,"links":118,"cta":136},"DNS (Domain Name System) connects domain names with information that Internet services need, such as website addresses and mail-routing records. Different records support different functions. For a business, understanding DNS means identifying the authoritative provider, the account owner and the services that depend on each setting before changing it.",[19,28,68,77,82,90],{"title":20,"paragraphs":21,"sources":24},"Follow the domain to its authoritative settings",[22,23],"When a person uses a website name, DNS helps the client find the relevant address information. MDN describes DNS as a distributed naming system rather than a single global address book. A recursive resolver obtains or reuses an answer; the domain's authoritative nameservers publish the records for the zone. These are different roles, and the account where you bought the domain may not host the active records.","Identify the registrar, the delegated nameservers and the DNS provider separately. A hosting supplier may manage several of those services through one dashboard, but that does not make them the same service. Keep a named business owner for the accounts and a supported recovery route. Otherwise, an apparently small website change can become a dispute about who is authorized to change the domain.",[25],{"label":26,"url":27},"MDN: Domain Name System","https:\u002F\u002Fdeveloper.mozilla.org\u002Fen-US\u002Fdocs\u002FGlossary\u002FDNS",{"title":29,"paragraphs":30,"sources":33,"table":37},"Match each record type to the service it supports",[31,32],"A and AAAA records associate names with IPv4 and IPv6 addresses; MX records identify mail routing; TXT records can carry verification or email-authentication information. A CNAME establishes an alias under the applicable DNS rules. Cloudflare's record reference documents these distinct functions. Do not copy a value from another account merely because the record name or provider looks familiar.","Build a service map before editing. Include the main website, alternate hostnames, business mail, external senders, verification records and any supplier-operated application. Record why each item exists and who can confirm it. A record that looks unused may support an infrequent billing task or account validation, so uncertainty should lead to an ownership question rather than immediate deletion.",[34],{"label":35,"url":36},"Cloudflare: DNS record types and their functions","https:\u002F\u002Fdevelopers.cloudflare.com\u002Fdns\u002Fmanage-dns-records\u002Freference\u002Fdns-record-types\u002F",{"caption":38,"headers":39,"rows":43},"DNS record and business-owner map",[40,41,42],"Area","What to identify","Acceptance question",[44,48,52,56,60,64],[45,46,47],"Registration","Registrar, registrant control and renewal owner.","Can the business manage the domain when a supplier leaves?",[49,50,51],"Delegation","Current authoritative nameservers and DNS account.","Are changes being made at the active provider?",[53,54,55],"Website","Required hostnames and address or alias records.","Does each intended visitor path reach the right service?",[57,58,59],"Email","Mail routing and authorized authentication records.","Do approved senders and recipients still work?",[61,62,63],"Other services","Verification and application dependencies.","Which owner can confirm the record is still needed?",[65,66,67],"Recovery","Protected access and a previous-state record.","Who can authorize a supported correction?",{"title":69,"paragraphs":70,"sources":73},"Understand caches without promising an instant update",[71,72],"DNS answers can be cached. A record's time to live, or TTL, influences how long a cached answer may be reused. Cloudflare notes that local caching can affect when a person experiences an update. Reducing a TTL now does not remotely erase an older answer already held by every resolver or application.","Record the authoritative answer and the resolver used during a check. A difference between two observations may be a cache or delegation question rather than proof that one provider ignored the change. Keep the observation time and exact hostname beside the conclusion. Avoid repeated speculative edits while the owner is trying to determine which answer is being used.",[74],{"label":75,"url":76},"Cloudflare: DNS time to live and caching","https:\u002F\u002Fdevelopers.cloudflare.com\u002Fdns\u002Fmanage-dns-records\u002Freference\u002Fttl\u002F",{"title":78,"paragraphs":79},"Keep DNS, hosting, encryption and mail delivery distinct",[80,81],"Correct DNS points a client toward information; the destination still needs to run the intended service. A website can resolve correctly and fail its TLS certificate check. Mail routing can be correct while a sender is rejected or a recipient rule sends a message elsewhere. Treat these as stages in a business path, not one generic DNS success or failure.","DNSSEC adds validation of signed DNS data, while HTTPS protects a web connection. Neither replaces control of the registrar or DNS account. A validly published record can still be an unwanted change if an attacker or mistaken administrator controls the account. Review authority, settings and actual service acceptance as connected but separate questions.",{"title":83,"paragraphs":84,"example":87},"Use a bounded change and verify the real workflow",[85,86],"Before a change, agree the exact records, affected services, authorized operator and recovery plan. Save the current relevant state and confirm that the proposed destination is ready. Nameserver changes deserve wider review because they can move responsibility for the entire zone. Include DNSSEC delegation and records that are unrelated to the website homepage.","After the supported change, check the authoritative state, selected resolver observations and the required business actions. A working homepage is not evidence that incoming mail, a customer form and every external sender still work. Record untested services and an owner for follow-up. A definition helps frame the work; it is not a production configuration to paste into a console.",{"title":88,"text":89},"Illustrative website-only migration gap","The website address is copied to a new DNS provider, but the mail-routing records are not included. The homepage works while business email fails. The missing dependency belongs in the migration scope, not in a claim that the whole domain was successfully moved.",{"title":91,"paragraphs":92},"Maintain ownership after the technical task is complete",[93,94],"Keep the service map with the people who operate the domain. Update it after a supplier change, a new sending platform or a nameserver migration. Review obsolete access and verify recovery without removing the only authorized administrator. The goal is a record that explains both where settings live and why the business depends on them.","CyberFixCrew is an Israeli cybersecurity company serving businesses worldwide with practical Israeli knowledge of DNS, websites, business email and digital infrastructure. We can scope a dependency review and supported changes with clear authority and acceptance checks. Scheduling and access are agreed before work, and provider-specific behavior is checked against the actual environment.","DNS questions for a business owner",[97,98,99,100,101,102,103],"Registrar and active DNS provider distinguished","Business account owner and recovery route known","Required hostnames and record purposes mapped","Website, mail and application dependencies included","TTL and observation conditions recorded","Change authority and previous state agreed","Business workflows verified separately",[105,108,111],{"question":106,"answer":107},"Is my registrar always my DNS provider?","No, registration, authoritative DNS and hosting can be managed by different providers. Identify the current delegated nameservers and the account that controls their records before changing anything. A registrar dashboard is not proof that its DNS zone is active.",{"question":109,"answer":110},"Will lowering TTL update every visitor immediately?","No, a lower value applies to answers served with that value; it does not erase older cached answers everywhere. Check the authoritative state and selected resolver observations, and record the conditions rather than promising an exact universal update time.",{"question":112,"answer":113},"Does a working website prove the domain migration is complete?","No: verify mail routing, approved senders, alternate hostnames and other required services. A homepage check supports that specific path. Keep untested dependencies and their owners visible in the handover.",[115,116,117],{"label":26,"url":27},{"label":35,"url":36},{"label":75,"url":76},[119,122,125,128,131,133],{"path":120,"label":121},"\u002Fblog\u002Fdns-change-checklist","Plan a DNS change with dependencies and recovery",{"path":123,"label":124},"\u002Fglossary\u002Fdnssec","Understand signed DNS validation",{"path":126,"label":127},"\u002Fglossary\u002Fhttps","Separate name resolution from HTTPS",{"path":129,"label":130},"\u002Fblog\u002Fdomain-expiry-risk","Keep registration and renewal under business control",{"path":13,"label":132},"Scope DNS and certificate work",{"path":134,"label":135},"\u002Fservices\u002Fcorporate-email","Review business email dependencies",{"title":137,"description":138,"button":139,"type":140},"Clarify who controls the domain and its services","Describe the providers and the change you need. We can map dependencies before a supported DNS update.","Discuss DNS ownership and changes","check",[],[],{"name":144,"aliases":145},"DNS (Domain Name System)",[146,147,148],"domain name system","authoritative DNS","DNS records",{"path":150,"label":151},"\u002Fresources","Website security resources and templates",{"path":153,"label":154},"\u002Fglossary","Cybersecurity glossary for small businesses",1794134057759]