Re: Changing DNS servers (name only) for a DNSSEC enabled domain

2023-02-13 Thread Crist Clark
What new DS record? The KSKs aren’t changing, are they? Why would they? All that is changing is the NS RRset (and maybe SOA if you’re changing the MNAME). If the NS glue in the parent doesn’t agree with the canonical NS RRset in the child, this is not a DNSSEC fail. This is as easy as changing

Re: Changing DNS servers (name only) for a DNSSEC enabled domain

2023-02-13 Thread Mark Elkins via bind-users
If the IP addresses of the DNS servers (dns[123].olddomain and dns[123].newdomain) are staying the same - then you only need to send an update to change your domain from being hosted at olddomain to newdomain. Ideally, the newdomain would be created first (pointing to the same IP addresses as

Changing DNS servers (name only) for a DNSSEC enabled domain

2023-02-13 Thread Danilo Godec via bind-users
Hello, in the near future I will have to change NS records for one of my domains, as DNS servers currently use an old domain (not mine), that will be phased out. DNS servers will actually remain the same, only the domain name will change. So, basically: * mydomain currently uses