Undelegating a Signed Subdomain

Michael Richardson mcr at sandelman.ca
Wed Dec 11 20:24:33 UTC 2024


1. I assume example.com is signed.
2. I don't understand why you can't just remove the NS records and fold the
   foo.bar.example.com data in.
3. After some interval of TTL, you can delete the DS records.

If bar.example.com is served by the same server (I assume not: because if it
was, why would you need to delegate it at all), then maybe there a problem.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 511 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20241211/38cf5b78/attachment.sig>


More information about the bind-users mailing list