Cloudflare Developers•4mo ago

nameservers changed +24hr ago. Cloudflare status still pending.

Hi, i've changed my nameservers on my registrar but Cloudflare still states the operation is pending. in the stats section of dig's output i get :

;; Query time: 59 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Fri Apr 26 17:50:04 CEST 2024
;; MSG SIZE  rcvd: 79

;; Query time: 59 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Fri Apr 26 17:50:04 CEST 2024
;; MSG SIZE  rcvd: 79

i believe 1.1.1.1 belongs to cloudflare, so my registrar might have updated the nameservers correctly. Could the issue be on cloudflare's side ? DNSSEC doesnt seems enabled as delv returned

;; none:29: no crypto support
delv: No trusted keys were loaded

;; none:29: no crypto support
delv: No trusted keys were loaded

5 Replies

poro•4mo ago

could the TLD be at cause ? its a .fo domain

Chaika•4mo ago

What's the domain?

poro•4mo ago

lo.fo yup, ICANN WHOIS shows that nameservers are correctly updated

Chaika•4mo ago

DNSSEC is enabled/configured at your Registrar, okisnavn.fo, with an invalid configuration. ; EDE: 9 (DNSKEY Missing): (no SEP matching the DS found for lo.fo.) https://dnsviz.net/d/lo.fo/dnssec/ You’ll want to either outright disable DNSSEC, or update your DNSSEC configuration with the information Cloudflare gives you: https://developers.cloudflare.com/dns/additional-options/dnssec/ These changes to your DNSSEC Configuration can be done at your Registrar, okisnavn.fo.

Cloudflare Docs

DNSSEC · Cloudflare DNS docs

DNS Security Extensions (DNSSEC) adds an extra layer of authentication to DNS, ensuring requests are not routed to a spoofed domain.

poro•4mo ago

oh! i see DNSSEC nowhere on their interface it could be that i didnt disable it before changing the nameservers.

Gaming

Programming

nameservers changed +24hr ago. Cloudflare status still pending.