[dns-operations] any registries require DNSKEY not DS?

[Sergey Myasoedov]

I think .ru/.рф were requiring DNSKEY together with DS to publish the DS. Or maybe the registrars were performing additional checks if the DS correspond to DNSKEY.


--
Sergey

> On 22 Jan 2020, at 23:13, Tony Finch <dot at dotat.at> wrote:
> 
> Are there any registries that configure secure delegations from DNSKEY
> records (and do their own conversion to DS records) rather than accepting
> DS records from the registrant? I think I have heard that .de is one.
> Looking at OpenSRS as an example of a registrar that supports lots of
> TLDs, I see that they don't support DNSSEC for .de
> http://opensrs.help/chart and their API only supports DS records
> https://domains.opensrs.guide/docs/set_dnssec_info
> 
> Also, I am uncomfortable with the endianness of their support domain names...
> 
> Tony.
> -- 
> f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
> responsible stewardship of the earth and its resources
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>