Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Publish DNSSEC DS record for boards.ie in the ie zone

Options
  • 26-10-2017 10:16am
    #1
    dubhthach
    Registered Users Posts: 3,284 ✭✭✭


    As boards.ie is using Cloudflare for anycast DNS, I notice that ye have DNSSEC enabled the zone. However the DS records have not been published in the .ie zone see:

    http://dnsviz.net/d/boards.ie/dnssec/

    As a result there is no validation of the chain of trust when it comes to the zone delegation (which shows up as 'insecure' in DNSViz). Given that ye already have enabled DNSSEC signing in Cloudflare I'd suggest you get the DS published in the IE zone.
    see:
    https://www.iedr.ie/adding-dnssec/
    Post edited by Shield on


Comments

Advertisement