Skip to main content
DNSSEC

Insecure delegation

Definition, context, related terminology, and source references for Insecure delegation.

Definition

A delegation from a signed parent that intentionally has no DS record for the child, indicating that the child is not part of the DNSSEC chain of trust. Validators can accept the child's unsigned answers as insecure rather than bogus.