Hi Martin,

our registry system TANGO does not automatically remove DNSSEC records
in its default setting.

Even when changing name servers I find it a dangerous heuristic to
remove the DNSSEC records. It might just be that the registrar changed
some name servers while keeping DNSSEC active. If the records are
removed automatically, the domain could unexpectedly be unsigned.

If a registrar wants to deactivate DNSSEC, they have to explicitly do
this, either via EPP or by logging into the web interface and manually
removing the DNSSEC records.

Best regards,

Michael

-- 
____________________________________________________________________
     |       |
     | knipp |            Knipp  Medien und Kommunikation GmbH
      -------                    Technologiepark
                                 Martin-Schmeisser-Weg 9
                                 44227 Dortmund
                                 Germany

     Dipl.-Informatiker          Fon:    +49 231 9703-0
                                 Fax:    +49 231 9703-200
     Dr. Michael Bauland         SIP:    michael.baul...@knipp.de
     Software Development        E-mail: michael.baul...@knipp.de

                                 Register Court:
                                 Amtsgericht Dortmund, HRB 13728

                                 Chief Executive Officers:
                                 Dietmar Knipp, Elmar Knipp

_______________________________________________
regext mailing list
regext@ietf.org
https://www.ietf.org/mailman/listinfo/regext

Reply via email to