Disable DNSSEC

Thomas Schulz schulz at adi.com
Tue Jan 7 18:07:20 UTC 2014


> 
> Once the DS record is removed from the .edu zone, queriers won't
> expect your zone to be signed any more. At that point, you can leave
> it signed or remove the signatures, and it won't make any difference.
> You just need to wait at least 24 hours from the time the record
> disappears from the .edu zone.
> 
I suggest you wait a little bit longer then that. There are multiple
name servers for edu and you want to make sure that all of them have
removed the DS record.

Tom Schulz
Applied Dynamics Intl.
schulz at adi.com


More information about the bind-users mailing list