Y
Hacker News
new
|
ask
|
show
|
jobs
by
innocenat
1487 days ago
Are there any case where DNSSEC can be kept enabled? I though it need to be disabled for transferring.
3 comments
sybercecurity
1487 days ago
There is, but it requires cooperation between everyone and double signing between the old and new hosting service (for a short period of time). That rarely works out in the real world.
link
teddyh
1487 days ago
There are some tools being worked on:
https://github.com/DNSSEC-Provisioning/Multi-signer
link
bauruine
1487 days ago
It shouldn't be a problem, at least i never had one, if you don't change the authoritative DNS servers.
link