Hostmaster Ltd has enhanced name protection in the .UA top-level domain by updating the DNSSEC key. To generate a new key, the company used the elliptic curve algorithm (ECDSA-P256-SHA256), which is more cryptographically robust. In addition, the use of the new algorithm allows to reduce the load on the domain system servers.
Earlier, the key for .UA domain was created using the classical algorithm (RSASHA512).
DNSSEC helps prevent or minimize attacks related to domain spoofing.
The .UA domain was signed in 2012.
From October 4, 2019 DNSSEC has been introduced for registrars in the public domains: ua, com.ua, gov.ua, as well as in the regional domains of Kyiv, Ivano-Frankivsk, Poltava and Uzhgorod.
Currently .UA Registry offers DNSSEC and encourages registrars to use the service.
SO far 14 registrars offer DNSSEC service for their customers (https://hostmaster.ua/registrars/).
DNSSEC will be one of the main topics at the UADOM annual conference, which will be held on December 6, 2019. (https://uadom.cctld.ua/)
Source (in Ukrainian)
