Who should enable DNS SEC?

I bought a domain from a registrar and added my CF name servers. I tried to activate DNS SEC after adding the domain to CF but CF instead provided some DS records that I needed to add to the domain.

The registrar however claims that they don't offer that option and the website host should (I use CF Pages). I am not sure now who is responsible for enabling DNS SEC, the registrar or CF?
Was this page helpful?