Yes — the best practice when transferring a domain with DNSSEC enabled is to disable it beforehand to prevent any potential service disruption.
Best Practice for Transferring with DNSSEC:
Before initiating transfer: Disable DNSSEC at your current registrar by removing the DS records.
Wait: Allow 24–48 hours for DNSSEC deactivation to propagate across the internet.
Initiate Transfer: Transfer your domain to the new registrar.
After transfer completes: Re-enable DNSSEC at the new registrar.
If you leave DNSSEC enabled during a transfer, you risk the new registrar not properly importing the existing DS records, which can break the “chain of trust” and make your domain unreachable by secure resolvers.
Comments
0 comments
Please sign in to leave a comment.