On 01/07/2014 05:01 PM, Eric Davis wrote: > My DNS appliances are not well-suited for this yet, so I want to > disable DNSSEC for my for domain. Anyone know the proper steps to > take and what order if there is any order? I have a DS record in > my parent domain. Do I need to remove that first? Thanks in > advance. > > Eric > > > > _______________________________________________ Please visit > https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users >
Yes, first remove the DS from parent zone, then wait for the DS ttl to expire and then you can start removing DNSKEY's from your zone. -- Georg _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
