- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
CDS / CDNSKEY records type support?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-14-2023 03:20 AM
Hi,
it seems NIOS does not even support these record types, much less automatically generating them?
Our registry (CH) supports automatically enabling DNSSEC on the presence of these records. IT would be far preferred to having to deal with uploading the DS to the registry via the EPP interface.
How is one supposed to to enable DNSSEC at scale and do a regular key-rollover when one has to then do the whole DS upload via some sort of side-channel?
It looks like that after all those years, DNSSEC is still an afterthought in these solutions (EfficientIP at least supports the record types, BlueCat says it will in the next release...no word on automation).