Stupid question, mainly because my brain is having a Friday brain fart…
I’ve changed the NS on my registrar, do I need to update them in the deSEC zone too? The zone has the standard NS
Hi Faisal,
By the RFC letter, it would be better to, but it is not required. Some registries however insist (e.g., .it).
From a resolution perspective, it makes no difference, as the resolver first sees the parent-side NS records and resolves them into a set of IP addresses. Some resolvers would later attempt to also resolve the child-side NS, but they lead to the same set of IP addresses.
Stay secure,
Peter
1 Like