Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't warn about DNSSEC DS record if the domain's DNS is not managed by the box #615

Closed
aspdye opened this issue Nov 29, 2015 · 3 comments
Closed

Comments

@aspdye
Copy link
Contributor

aspdye commented Nov 29, 2015

Hi there,

Considering the fact that CloudFlare now provides DNSSEC for domains, it is an alternative to the using of the MiaB DNS ;)

Personally - i have created an instance with the hostname (1. Domain) on the MiaB DNS (for TLSA Record, ...). All other secondary domains are at the CloudFlare DNS and use the External DNS Records provided by the MiaB Control Panel. (They dont need an TLSA-Record and the SSHFP-Records [which are not supported by CloudFlare] as i learned by @JoshData here: https://discourse.mailinabox.email/t/dane-tlsa-record-for-secondary-domain/945)

According to https://discourse.mailinabox.email/t/cloudflare-external-dns/928, I think we should change the message that the DS Record is incorrect to: ",this may be ok, if you are using an external DNS with its own DNSSEC Keys".

@JoshData JoshData changed the title DNSSEC Warning Design Don't warn about DNSSEC DS record if the domain's DNS is not managed by the box Dec 7, 2015
@JoshData
Copy link
Member

JoshData commented Dec 7, 2015

If the domain is using external DNS, we should not offer any DNSSEC info for that domain -- it is up to the primary nameserver to do it.

@aspdye
Copy link
Contributor Author

aspdye commented Dec 7, 2015

👍 we Could make a Checkbox called I am using an External DNS. Then we Would only Check if the Records are correct ;)

@JoshData
Copy link
Member

JoshData commented Dec 7, 2015

Yep that's #404.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants