On 20 December 2013 18:37, David Forrest <drf at maplepark.com> wrote: > gandi.net +1 > > I transferred from NS to Gandhi in December 1998. I don't know about their > hosting of primary DNS but they do host a secondary of mine and it seems to > resolve there with an aa flag: Yep, secondary works, but they can't be a DNSSEC primary. Steve