I disabled DNSSEC on my domain more than a week ago. But the message “Your DNSSEC setup will be disabled as soon as we detect that the DS record has been removed from your registrar.”
Do you know how long it would take to disable DNSSEC upstream?
I thought it would be quicker than one week.
Assuming you have removed the DS records at your registrar, the usual guidance is to wait for twice the TTL (time to live, or cache time) of the DS record, but no shorter than the TTL.
Somebody may have seen the DS record immediately prior to you removing the DS records, so they expect your domain to be signed for the TTL.
Can you share the domain?
The domain is
gpaterno.com … and I just removed the same on
I still see DS records for both of those domains. Have you used the interface with your registrar to remove the DS records. I think EuroDNS is the registrar.
EuroDNS doesn’t let me remove the DS records. I’m stuck in a kind of loop.
I wrote to EuroDNS support and let’s see what’s happening.
This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.