DS Records with GoDaddy

I have an issue with setting up Delegation of Signing (DS) records with GoDaddy. Upon atempting to add the DS records from DeSEC I receive this message “Unable to submit DS record. If this continues, please contact our support team at 3050-7470.” GoDaddy responds with the DS Records are incorrect.

Also for the second DS record I’m unable to select Digest Type 4. GoDaddy only supports Digest Types 1 and 2.

is it possible to use GoDaddy or should I move the domain to another registrar?

Hi dwill,

Thank you for your message, and welcome to deSEC! :slight_smile:

First of all, only one DS record is needed. The current best practice is to use the one with digest type 2. I’ll make a note to improve our GUI in that regard.

Second, regarding the error message: We can sort this out with GoDaddy, but we will need your domain name and a screenshot of your inputs. Can you please send that to our support? Thanks!

Stay secure,
Peter

1 Like

I have exactly the same problem. Just created a new domain “tludewig.de” at deSEC dealing with godaddy as registar.

Thank you for your report. We are in touch with GoDaddy to get this problem resolved. I will update this thread once that is done.

Stay secure,
Peter

1 Like

I have the same problem right now.

Funny thing is, I have a .com TLD and a .solutions TLD.
The .com works, but for the .solutions I get an error.

Had a 1h call with them yesterday. In the end they said, that the digest is probably broken/wrong and I should contact deSEC.
Offtopic: Peter already offered me his help yesterday. I is just amazing how good the support of deSEC is! Lots of love to you guys! :smiling_face_with_three_hearts:

Anyway, I will call them again today and report back if it worked out.

1 Like

If I recall correctly, the problem in @thorstenl’s screenshot was that .de prefers to accept DNSKEY-style input (not DS-style), and the GoDaddy interface wasn’t prepared for that.

I’m not sure whether .solutions has the same issue. (I thought all the gTLDs do DS and not DNSKEY, but I may be wrong.) Perhaps something worth asking, @KapernMagIchNicht!

Stay secure,
Peter

1 Like

Hmm… you are right.
GoDaddy only accepts (or at least the form) DS and not DNSKEY for .solutions

But it does not work. I am really wondering if I am seriously their first customer that wants to set a DS record for solutions :smile:

Will go for a walk and call them :slight_smile:

2 Likes

I am currently on the phone with them (min 35) and they try to tell me that deSEC does not accept the DNSSEC record and since my nameservers are not with GoDaddy there is nothing they can do. I tried to explain that since they are my registar, the DS record has to be made on GoDaddy and not deSEC. She denies.

Of course that is complete hogwash. Thankfully I also have a .com domain with goDaddy that also uses deSEC as nameserver. Here the DS record works. So I asked them why it works there but not on .solutions.

Thanks to that argument, she tries again with second level support and put me on hold again…

70mins still on the phone. They always claim that I have to enable DNSSEC on deSEC. If I can proof to them that DNSSEC is active on deSEC.
Funny thing I noticed, the DNSSEC debugger shows that everything is set up right, only the DS records is missing.
That in my opinion proofs that the problem is with them and not with deSEC.

82min: got a ticket number, should hear back in 72 hours.

@KapernMagIchNicht sounds to me it is time to switch a way from GoDaddy.

1 Like

While I agree, unfortunately I have exactly 0 experience with DNSSEC. I really like hostpoint.ch and they offer great support (I am not customer myself, but my customers sometimes) but don’t really know if they support it. Also they ask for twice the money compared to everyone else.

I will give GoDaddy another chance. Is there any good registrar you can recommend?

1 Like

Got an automatic mail from GoDaddy, that the ticket is closed and the issue resolved.
I don’t know what the problem was, but it does actually work now :slight_smile: