Disable DNSSEC

[Georg Kahest]

On 01/07/2014 05:01 PM, Eric Davis wrote:
> My DNS appliances are not well-suited for this yet, so I want to
> disable DNSSEC for my for domain.  Anyone know the proper steps to
> take and what order if there is any order?  I have a DS record in
> my parent domain.  Do I need to remove that first?  Thanks in
> advance.
> 
> Eric
> 
> 
> 
> _______________________________________________ Please visit
> https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
> 
> bind-users mailing list bind-users at lists.isc.org 
> https://lists.isc.org/mailman/listinfo/bind-users
> 

Yes, first remove the DS from parent zone, then wait for the DS ttl to
expire and then you can start removing DNSKEY's from your zone.

-- 
Georg