DNS hosting
Amazon Route 53 privacy rating
Authoritative DNS hosting and domain registration service from Amazon Web Services, with health checks, routing policies and pay-per-use pricing.
Summary
Amazon Route 53 scores 50 out of 100 (grade D) on the DNS hosting criteria. It meets 6 of 12 criteria: transparency report, tells users about requests, TLS configuration, security headers, API access and two-factor login. It partly meets independent audit and DNSSEC. It does not meet open source, no trackers or telemetry, no ads or data sales and modern web standards. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+, Mozilla HTTP Observatory grade A+ and Internet.nl website score 66%.
Score 50 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
AWS websites set cookies from third parties including The Trade Desk, Oracle BlueKai and LinkedIn.
-
No
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
The privacy notice says cookies and identifiers are used to advertise to visitors on third-party websites.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Only the SOC 3 summary report is public; SOC 1 and SOC 2 reports are available to customers in AWS Artifact.
-
Yes
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Semi-annual reports with counts of government requests to Amazon and AWS and how they were answered.
-
Yes
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
Amazon notifies customers before disclosing content unless prohibited or there is clear indication of illegal conduct.
-
Partial
DNSSEC Weight 3 of 3
Can DNSSEC be turned on for hosted zones?
DNSSEC signing is supported but needs a customer-managed AWS KMS key for the key-signing key.
-
Yes
API access Weight 1 of 3
Can records be managed through an API on every plan?
Every AWS account can manage hosted zones and records through the Route 53 API.
-
Yes
Two-factor login Weight 2 of 3
Do accounts support two-factor authentication with an authenticator app or security key?
Passkeys, security keys and authenticator apps are supported.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A+
-
Yes
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade A+ (105/100+)
-
No
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Score 66%