DNSSEC disabled but RRSIG records showing

DNSSEC is not enabled on my domain at Cloudflare but there are RRSIG records showing when using dig with +dnssec or using the dnssec-analyzer.verisignlabs.com tool.

How to get rid of these RRSIG records please?

DNSSEC is not enabled for my domain at my registrar or at the registry.

Thanks for your help.

Have you only recently disabled DNSSEC?

Can you share the domain?

Hi Michael,

I disabled the DS record and then DNSSEC at Cloudflare and the RRSIG records were still showing more than two weeks later. So I moved nameservers elsewhere.

I then selected the ‘remove site from Cloudflare’ option on 15 September 2020.

I came back to Cloudflare today and saw they had removed my site which was good so I started over adding my site and recreating the zone records. I thought the RRSIG records would definitely be gone now but no they are still showing.

The button at Cloudflare is giving me the option to ‘Enable DNSSEC’ but it already is.

The domain is: tewhanau.co.nz.


try API

curl -X DELETE "https://api.cloudflare.com/client/v4/zones/023e105f4ecef8ad9ca31a8372d0c353/dnssec" \
     -H "X-Auth-Email: [email protected]" \
     -H "X-Auth-Key: c2547eb745079dac9320b638f5e225cf483cc5cfdda41" \
     -H "Content-Type: application/json"

Thanks user3011.

That’s removed them.

This topic was automatically closed 5 days after the last reply. New replies are no longer allowed.