Hurricane Electric's IPv6 Tunnel Broker Forums

Advanced search  

News:

Welcome to Hurricane Electric's Tunnelbroker.net forums!

Author Topic: DNSSEC DS Record  (Read 13756 times)

frleong

  • Newbie
  • *
  • Posts: 1
DNSSEC DS Record
« on: October 24, 2018, 07:26:13 PM »

Hello,

I would like to delegate a subdomain to another DNS server to test DNSSEC. How can I add DS record to the domain hosted by dns.he.net? Thanks.
Logged

snarked

  • Hero Member
  • *****
  • Posts: 728
Re: DNSSEC DS Record
« Reply #1 on: October 25, 2018, 10:19:22 PM »

DS records go in the parent zone.  You need to add them through your domain registrar's interface (assuming your domain is at a registrar that supports it).  For reverse zones, it's my understanding that HE doesn't support that (yet).

If you are adding this for a subdomain of a domain you already have, just put the DS rrset into your zone.  Works fine for HE with secondary zones (as I have done that personally) by adding it at the primary host.  For HE with primary zone hosting, HE will have to answer the question.
Logged