Hacker News new | past | comments | ask | show | jobs | submit login

Are there any case where DNSSEC can be kept enabled? I though it need to be disabled for transferring.



There is, but it requires cooperation between everyone and double signing between the old and new hosting service (for a short period of time). That rarely works out in the real world.


There are some tools being worked on: https://github.com/DNSSEC-Provisioning/Multi-signer


It shouldn't be a problem, at least i never had one, if you don't change the authoritative DNS servers.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: