Hi, registrars, as i know, do not supports sending DS records to them (as I can tell in CZ :) ). Some of them was few years after apes. But we've some modern thinking registrars and they offered to register keysets. After registering keyset I put my public KSK key (that knot uses too). All of this was over web administration of my domain on the registrator's pages. But you must ask your domain registrator, maybe there should be some differencies in your country. I was waitting for Knot 1.4.x, dnssec is very simple with it. Best regards Josef Karliak Cituji Sime Ramov <s(a)ramov.com>om>: -- Ma domena pouziva zabezpeceni a kontrolu SPF (www.openspf.org) a DomainKeys/DKIM (with ADSP) . Pokud mate problemy s dorucenim emailu, zacnete pouzivat metody overeni puvody emailu zminene vyse. Dekuji. My domain use SPF (www.openspf.org) and DomainKeys/DKIM (with ADSP) policy and check. If you've problem with sending emails to me, start using email origin methods mentioned above. Thank you. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

I've used `dnssec-dsfromkey` to create a DS record (from the KSK key, hope that's the one). Waiting for an answer from the registrar. Thanks!