On Thu, 2021-09-30 at 17:42 -0400, Viktor Dukhovni wrote: > Pity this did not go smoothly for them, a premature rollout can be mildly > inconvenient, but then yanking the DS RRs was definitely a bad call.
Yanking a DS does not break domains. Yanking DNSKEY+RRSIG before the DS is expired breaks domains. If there was a bad call (which we can't know from our back seats), yanking the DS was not it. Kind regards, -- Peter van Dijk PowerDNS.COM BV - https://www.powerdns.com/ _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
