Cannot resolve domain

Hi, I transferred a domain off of Google Domains to Hover and cannot get it to resolve now on 1.1.1.1 or 1.0.0.1:

curl 'https://cloudflare-dns.com/dns-query?ct=application/dns-json&name=coryd.me&type=NS'

{"Status": 2,"TC": false,"RD": true, "RA": true, "AD": false,"CD": false,"Question":[{"name": "coryd.me.", "type": 2}],"Comment": "DNSSEC validation failure. Please check http://dnsviz.net/d/coryd.me/dnssec/"}

Dig:

; <<>> DiG 9.10.6 <<>> coryd.me mx @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 62008
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;coryd.me.			IN	MX

;; Query time: 84 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Sun Jun 02 13:58:05 PDT 2019
;; MSG SIZE  rcvd: 26

; <<>> DiG 9.10.6 <<>> coryd.me mx @1.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 51265
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;coryd.me.			IN	MX

;; Query time: 87 msec
;; SERVER: 1.0.0.1#53(1.0.0.1)
;; WHEN: Sun Jun 02 13:58:31 PDT 2019
;; MSG SIZE  rcvd: 26

As per the error you received over HTTPS:

DNSSEC validation failure. Please check http://dnsviz.net/d/coryd.me/dnssec/

Did you have DNSSEC enabled on Google Domains? When you moved your DNS hosting did you just move the records, but leave the DS records as they were in the root zone?

2 Likes

I did neglect to disable DNSSEC – is that something that will increase propagation time in this case? The domain was transferred to Hover as the registrar, name servers were updated and DNSSEC is no longer enabled.

Edit: it looks like Hover is persisting the DS record. I’ll contact them to remove it.

There is a DS record in the .me zone. You need that removed. Your registrar can remove it for you. It is not a record in your own coryd.me zone.

Ah I see, so the riot administrator of the .me tod?

You don’t have a relationship with the .me zone, so your registrar has to do this for you.

Thanks for pointing me in the right direction and your patience clarifying things. Hover was able to sort everything out with the domain for me.