I’m currently with GoDaddy, which I regret. For a week now I’ve been trying to migrate my DNS to deSEC’s service, but their support keeps telling me to wait another 48 hours for the NS records to propagate.
for .it domains, nameserver entries may only contain IPv4 addresses.
To me, restricting nameservers to IPv4-only addresses seems unwise, since certificates are usually verified against the exact name they were issued for. However, I’m quite a novice when it comes to DNSSEC.
So my question in general is: Does DNSSEC still work correctly when the nameservers are set with their IP addresses?
they state there DNSSEC is not supported. So how do I proceed about the domain limit with deSEC?
If GoDaddy doesn’t support DNSSEC for your .it domain and you’re having problems with it, then it’s time to switch registrars.
The .it NIC definitely supports and accepts IPv4, IPv6 for the Nameservers and also DNSSEC, so what GoDaddy says there isn’t correct. I can only recommend switching the registrar for your domain.
Is it then, that I am allowed permanently to have one delegated Domain without DNSSEC while i am living with the cul-de-sac being unable add another domain?
Domains created at deSEC which do not include deSEC’s nameservers in their set of authoritative nameservers (“NS records”) or which fail to establish a DNSSEC chain of trust may receive a deletion warning and may be deleted four weeks thereafter if that condition still applies."
thanks for that quote. that is doubtlessly the answer i was looking for.
intention was to wait for the renew cycle of the contract before i switch registrar. meanwhile to keep it non-dnssec’ed with deSEC. but well. the §4 is clear…