On 31/08/2021 11:49, mj wrote: Hi MJ,
> Now the question. In most (if not all?) docs we read on the subject, the > DS key looks something like: > >> knot-dns.cz. 3600 IN DS 54959 13 2 >> 268DE6EB7E0630953B8AF0F0037BF68FD10443BF01B5E17805AF94C2 6921897D > or >> dnssec-tools.org. 21600 IN DS 9638 13 2 >> 92551AA25C4ADE8E2882FBF4BEB5B54F9D84379B153848852B68BB3C 793F4B0B > > note the spaces at the end of the key string. On the wire, there are no spaces in the DS rdata. These spaces are printed by the "dig" utility, supposedly for better readability. Other tools, such as "drill" do not display any spaces. When you submit your DS record, don't put any spaces. And even if you do, the web form or the backend that processes the DS record will strip all the spaces. Regards, Anand -- https://lists.nic.cz/mailman/listinfo/knot-dns-users
