Remove orphan DNSSEC DS records

Help
1

Please remove orphan DNSSEC DS records for indiegauge.com

Hi Vercel team,

My domain indiegauge.com is using Vercel’s nameservers (ns1.vercel-dns.com / ns2.vercel-dns.com) and the zone is not signed.

The .com registry still publishes an old DNSSEC DS entry:

  • Key Tag: 19718
  • Algorithm: 13 (ECDSA-P256)
  • Digest Type: 2
  • Digest: 8ACB…7805A

This orphan DS causes DNSSEC validation failures (SERVFAIL) for resolvers that validate DNSSEC, so Bing and other services cannot crawl the site.

Please delete all DS records for indiegauge.com at the registry. No replacement DS is needed at this time; I just want the domain to resolve as an unsigned zone.

Thanks a lot for your help!

2

The domain troubleshooting guide can help with most custom domain configuration issues. You might be able to use that guide to solve it before a human is available to help you. Then you can come back here and share the answer for bonus points.

You can also use v0 to narrow down the possibilities.

5

Hi @pooyahrtn, welcome to the Vercel Community!

We’re unable to find any DS records. Based on a quick search on Whois, we found DNSSEC: unsigned.

Can you share where did you get the information above?

6

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.