Each domain with a DS-Record must have at least 2 NS-Records

Open pfedick opened this issue 10 years ago • 2 comments

When there is a DS-RR for a domain name, there must also be at least 2 NS-RR. This is a requirement of the german registry DENIC.

Regards, Patrick

Nov 09 '15 14:11 pfedick

That's a question of policy - I don't think this should be a hardcoded requirement ?

Having a configurable policy (e.g. using LUA) would be one way to do this. Maybe Anton has another suggestion :)

Nov 09 '15 18:11 regnauld

What is wrong with using the existing "single-ns" policy check? It is different from what you want because is always requires to be at least 2 NS records per name, but maybe you can use it anyway?

Aug 04 '17 10:08 tobez