Skip to content
whois.me.uk
Menu
Sign in

DNSSEC-DS-WITHOUT-KEY

DS published but no DNSKEY in the zone

What it means

The parent says the zone is signed; the zone says it is not. Validating resolvers refuse to resolve it.

How to fix it

  1. 1Either re-sign the zone and publish the DNSKEY set, or remove the DS record at the registrar.

Re-check after the change

DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.