Stupid question, mainly because my brain is having a Friday brain fart…
I’ve changed the NS on my registrar, do I need to update them in the deSEC zone too? The zone has the standard NS
Hi Faisal,
By the RFC letter, it would be better to, but it is not required. Some registries however insist (e.g., .it).
From a resolution perspective, it makes no difference, as the resolver first sees the parent-side NS records and resolves them into a set of IP addresses. Some resolvers would later attempt to also resolve the child-side NS, but they lead to the same set of IP addresses.
Stay secure,
Peter
1 Like
Hi Peter, I’ve been using these nameservers on my .eu domains for a couple of months now. No issues to report 
maybe we can slowly move out of the “experimental” phase? Btw, did you get any respnse from deNIC regarding their outdated nameserver requirements?
We did get a response, and the root of the issue is a misreading of Technical requirements for authoritative name servers. We’re working on getting that addressed, see OARC 46 (Edinburgh, Scotland) (16-17 May 2026): Cross-addressed Nameservers · DNS-OARC (Indico).
Before making this official, we’d first like to resolve the DENIC issue as we’re otherwise foreseeing a lot of support requests.
We’re not planning to remove this functionality, so you can consider it “stable experimental”. 
Stay secure,
Peter
1 Like