[dns-operations] any registries require DNSKEY not DS?

Patrick Mevzek mevzek at uniregistry.com
Wed Jan 22 22:48:16 UTC 2020


On 22/01/2020 17:13, Tony Finch wrote:
> Are there any registries that configure secure delegations from DNSKEY
> records (and do their own conversion to DS records) rather than accepting
> DS records from the registrant? I think I have heard that .de is one.

CA (IIRC they require both the key and DS, probably to double check the
DS themselves), BE and EU are some example that comes immediately to
mind. There are others.

DE is definitively one also.

-- 
Patrick Mevzek



More information about the dns-operations mailing list