I'm creating a RSA/SHA-512 Zone Signing Key and Key Signing Key at Dynect Managed DNS (corporate offering)

The Delegation Signer Record that was created is SHA1. Should I be concerned about this?


1 Answer 1


To answer the question, no, the DS records have many different possible algorithms. This list can be viewed here.

I'd recommend moving from SHA1 hashes to at least SHA256. Personally, I use ECDSAP384SHA384 (Algorithm number 14).

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .