[dns-operations] slack.com bogus

Peter van Dijk peter.van.dijk at powerdns.com
Thu Sep 30 22:22:01 UTC 2021


On Thu, 2021-09-30 at 17:42 -0400, Viktor Dukhovni wrote:
> Pity this did not go smoothly for them, a premature rollout can be mildly
> inconvenient, but then yanking the DS RRs was definitely a bad call.

Yanking a DS does not break domains. Yanking DNSKEY+RRSIG before the DS
is expired breaks domains. If there was a bad call (which we can't know
from our back seats), yanking the DS was not it.

Kind regards,
-- 
Peter van Dijk
PowerDNS.COM BV - https://www.powerdns.com/




More information about the dns-operations mailing list