Changes between Initial Version and Version 1 of Ticket #4162, comment 27


Ignore:
Timestamp:
2025-06-02T07:52:17Z (9 months ago)
Author:
btlogy
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #4162, comment 27

    initial v1  
    11In addition to the lack of (full) support for subdomain zone by Hetzner, I've also bumped into the lack of support for DNSSEC delegation for subdomains: most registrars, when they do support DNSSEC, only allows the owner to manage DS keys to a (2nd level) domain (e.g. tahoe-lafs.org).
     2Which means the chain of trust will be broken for any subdomain (e.g. of.tahoe-lafs.org).
    23
    34In short, it's best to avoid subdomain delegation whenever we can...