Known quirks


Known Quirks

The following quirks have been observed by some users. The intention of this list is to help you with troubleshooting. There is no guaratee that you experience the same issues and you should not assume that the list is kept up to date.

If you observe weird behavior please report it via #servfail on irc.hackint.org to help other users.

Common problems

Quite a few registrars and at least one TLD (.pl) implements overzealous NS validity checks. One of those commonly includes checking whether a NS server is on a second-level domain - that is, ns.example.org would be fine, but example.org isn't. There's nothing in the RFCs that requires this behavior, so as far as we're concerned this is a bug (not that we have anyone to report it to, given how widespread it is).

To cut to the chase - your registrar may give you an unhelpful error if your NS list includes sakamoto.pl. To mitigate this:

  1. Add your zone to SERVFAIL through _servfail-challenge
  2. Edit the NS record listing sakamoto.pl to instead say a.sakamoto.pl
  3. With your registrar, add a.sakamoto.pl instead

Specific provider quirks

NICs

NameTLDObserved QuirkReported
DENIC.dePredelegation checks must complete successfully before a zone transfer is allowed.
Source: DENIC-23p.pdf
2024-01-03
ISNIC.isNameservers must be registered with ISNIC before being allowed for delegation.
Source: Domain Redelegate FAQ
2024-01-03
ISNIC.isNameservers must be fully set up and functional before delegation.
Source: Domain Redelegate FAQ
2024-01-03

Registrars

NameCountry
(Headquarter)
Observed QuirkReported
EdisATNameservers must be fully set up and functional before delegation2024-01-03
HetznerDENameservers must be fully set up and functional before delegation2024-01-03
NetcupDEDNSSEC must be configured with the key itself, not the digest. Enter just the base64-encoded data into the “Public key” field. Flags should be set to KSK (257).2024-08-29