Multiple DS Records

rob777 via Pdns-users <[email protected]> Tue, 11 Nov 2025 13:30:17 +0100
Newsgroups gmane.network.dns.powerdns.user
Message-ID <CAAPVCxwWT6VHrJrcdoV_GYCnVyPphWaFYrnf7dmr86+f6y+Vbw@mail.gmail.com>
--===============8320609279030061708==
Content-Type: multipart/alternative; boundary="0000000000001420c7064350d08f"

--0000000000001420c7064350d08f
Content-Type: text/plain; charset="UTF-8"

Hi

May be slightly OT since it's not only related to Powerdns alone, but:

If i have two DS Records for a domain at my registrar (let's assume same
algo) and one DS record is correct (Fully Validated Chain) and the other is
broken - will all recursors which validating DNSSEC work all the time while
querying my domain or will it work randomly/half of the time (because one
of the two DS Records is broken)...?

Regards

--0000000000001420c7064350d08f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi</div><div><br></div><div>May be slightly OT since =
it&#39;s not only related to Powerdns alone, but:</div><div><br></div><div>=
If i have two=C2=A0DS Records for a domain at my registrar (let&#39;s assum=
e same algo) and one DS record is correct (Fully Validated Chain) and the o=
ther is broken - will all recursors which validating DNSSEC work all the ti=
me while querying my domain or will it work randomly/half of the time (beca=
use one of the two DS Records is broken)...?</div><div><br></div><div>Regar=
ds</div></div>

--0000000000001420c7064350d08f--

--===============8320609279030061708==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Pdns-users mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-users

--===============8320609279030061708==--