Known quirks
Known Quirks
The following quirks have been observed by some users. The intention of this list is to help you with troubleshooting. There is no guaratee that you experience the same issues and you should not assume that the list is kept up to date.
If you observe weird behavior please report it via #servfail on irc.hackint.org to help other users.
Common problems
Quite a few registrars and at least one TLD (.pl) implements overzealous NS validity checks.
One of those commonly includes checking whether a NS server is on a second-level domain - that is,
ns.example.org
would be fine, but example.org
isn't. There's nothing in the RFCs that requires
this behavior, so as far as we're concerned this is a bug (not that we have anyone to report it to,
given how widespread it is).
To cut to the chase - your registrar may give you an unhelpful error if your NS list includes
sakamoto.pl
. To mitigate this:
- Add your zone to SERVFAIL through _servfail-challenge
- Edit the NS record listing
sakamoto.pl
to instead saya.sakamoto.pl
- With your registrar, add
a.sakamoto.pl
instead
Specific provider quirks
NICs
Name | TLD | Observed Quirk | Reported |
---|---|---|---|
DENIC | .de | Predelegation checks must complete successfully before a zone transfer is allowed. Source: DENIC-23p.pdf | 2024-01-03 |
ISNIC | .is | Nameservers must be registered with ISNIC before being allowed for delegation. Source: Domain Redelegate FAQ | 2024-01-03 |
ISNIC | .is | Nameservers must be fully set up and functional before delegation. Source: Domain Redelegate FAQ | 2024-01-03 |
Registrars
Name | Country (Headquarter) | Observed Quirk | Reported |
---|---|---|---|
Edis | AT | Nameservers must be fully set up and functional before delegation | 2024-01-03 |
Hetzner | DE | Nameservers must be fully set up and functional before delegation | 2024-01-03 |
Netcup | DE | DNSSEC must be configured with the key itself, not the digest. Enter just the base64-encoded data into the “Public key” field. Flags should be set to KSK (257). | 2024-08-29 |