I think .ru/.рф were requiring DNSKEY together with DS to publish the DS. Or maybe the registrars were performing additional checks if the DS correspond to DNSKEY.
-- Sergey > On 22 Jan 2020, at 23:13, Tony Finch <d...@dotat.at> wrote: > > Are there any registries that configure secure delegations from DNSKEY > records (and do their own conversion to DS records) rather than accepting > DS records from the registrant? I think I have heard that .de is one. > Looking at OpenSRS as an example of a registrar that supports lots of > TLDs, I see that they don't support DNSSEC for .de > http://opensrs.help/chart and their API only supports DS records > https://domains.opensrs.guide/docs/set_dnssec_info > > Also, I am uncomfortable with the endianness of their support domain names... > > Tony. > -- > f.anthony.n.finch <d...@dotat.at> http://dotat.at/ > responsible stewardship of the earth and its resources > _______________________________________________ > dns-operations mailing list > dns-operations@lists.dns-oarc.net > https://lists.dns-oarc.net/mailman/listinfo/dns-operations > _______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
