DNSSEC and DS record

What is the name of the domain?

What is the error number?

CDNSKEY

What is the error message?

CDNSKEY: The CDNSKEY RRset must be signed with a key that is represented in both the current DNSKEY and the current DS RRset. See RFC 7344, Sec. 4.1.

What is the issue you’re encountering

Cloudflare DNS are used on this domain. To implement DNSSEC is required to add a DS record. Checking on dnsviz two errors are shown

What steps have you taken to resolve the issue?

I asked the registrar, but they say that since DNS records are forwarded to cloudflare, any new DS record should be set on Cloudflare and not by them.

What feature, service or problem is this related to?

DNSSEC

I’m afraid they are wrong. The DS record is always managed by your registrar.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.