I have this hidden master DNS nameserver notifying and updating the two public slave DNS servers:
- my own VPS running Debian/Bind9 DNS
- 3rd-party secondary nameserver provider (afraid.org)
I finally got DNSSEC working with the hidden master and my public slave server (VPS).
Now I am searching high and low for a secondary nameserver service provider that can ALSO support DNSSEC. I couldn't find one. I couldn't understand why.
Then I saw this clue on GoDaddy Secondary NameServer wiki:
- "You cannot use both DNSSEC and Secondary DNS with the same domain name."
Why can't a 3rd party provide asecondary name server with DNSSEC?