I have several domains for private use registered with strato. Since a few days I’m not able to use more than 1 domain with desec, they want to have it delegated with DNSSEC. I contacted the strato support, according to them it’s not possible to use own DS records with third party nameservers. Its pssible to use DNSSEC with theri own nameservers only. Therefor I can’t put in the ds records to use it with desec, any experience with strato, any ideas, do i have to change the domain registrar?
Your registrar uses DNSSEC as an upselling opportunity. Don’t expect them to poke a hole in that strategy by allowing you to use DNSSEC with external nameservers.