Hurricane Electric's IPv6 Tunnel Broker Forums

DNS.HE.NET Topics => General Questions & Suggestions => Topic started by: frleong on October 24, 2018, 07:26:13 PM

Title: DNSSEC DS Record
Post by: frleong on October 24, 2018, 07:26:13 PM
Hello,

I would like to delegate a subdomain to another DNS server to test DNSSEC. How can I add DS record to the domain hosted by dns.he.net? Thanks.
Title: Re: DNSSEC DS Record
Post by: snarked on October 25, 2018, 10:19:22 PM
DS records go in the parent zone.  You need to add them through your domain registrar's interface (assuming your domain is at a registrar that supports it).  For reverse zones, it's my understanding that HE doesn't support that (yet).

If you are adding this for a subdomain of a domain you already have, just put the DS rrset into your zone.  Works fine for HE with secondary zones (as I have done that personally) by adding it at the primary host.  For HE with primary zone hosting, HE will have to answer the question.