deSEC

deSEC is a free, non-profit DNS hosting service operated from Berlin, Germany. It runs a fully open-source stack and answers queries from two redundant Anycast networks across 15 worldwide locations. Features include automatic DNSSEC with managed ZSK/KSK key rollovers, CDS/CDNSKEY publication for parent zones, IPv6, dynDNS, a documented REST API, a web UI and 2FA via TOTP. Privacy-by-design: deSEC does not log query content or client IPs in normal operation, and account signup only needs an email address.