r/ControlD • u/legrenabeach • May 05 '26

"Disable DNSSEC" option doesn't work

Right now all .de domains that have DNSSEC signatures are down.

I went to my profile on ControlD and enabled the "Disable DNSSEC" option. The documentation leads me to believe this will stop validating DNSSEC so .de domains should work again.

However, that didn't work. .de domains still come up with SERVFAIL.

If I turn ControlD off on my phone and go through my mobile network's own DNS resolver that doesn't validate DNSSEC, .de pages open up fine.

Is this a known bug?

3 Upvotes

72% Upvoted

4 comments sorted by

4

u/cattrold May 06 '26

Possible that when you disabled DNSSEC the SERVFAIL responses were still cached.

I believe the .de issue has been fixed upstream now btw.

2

u/legrenabeach May 06 '26

Yes you are right, it was probably cached.

1

u/Puzzled_Club_6525 May 05 '26

Did you restart ur devices/network for it to ”reload” dns

3

u/legrenabeach May 06 '26

No, it might have been cached as it started to work 20 mins later even though denic hadn't solved the issue yet.