Re: DNSSEC SERVFAIL when parent zone has no DS record

DS of domain.com." > > Admittingly, logmessages could be somewhat more userfriendly, > but I'd check if domain.com. itself is properly signed. > > Kind regards, > > Marc Lampo > > > -Original Message- > From: Sergio Charpinel Jr. [mailto:sergiocharpi.

DNSSEC SERVFAIL when parent zone has no DS record

Hi, Dig  returns SERVFAIL while trying to resolve a dnssec enabled zone without DS record in parent zone. For example, I have these two DNSSEC enabled zones: domain.com subdomain.domain.com domain.com zone has NO DS record for subdomain.domain.com zone, and subdomain.domain.com has an A record fo