Bob Docs

DS Records in the Chrome Extension

When you add a DS record in the Root Zone DNS editor, Bob asks for the same four parts that appear in a normal DS record: Key Tag, Algorithm, Digest Type, and Digest.

Short Version

Split the DS record on spaces and enter the values in the same order.

DS = 15928 13 2 9638b2da3ceaeb4d436ce0a62c87c0dc0141ebd69ee076422ee212e797efb331

What To Enter

Bob Field Value Meaning
Key Tag 15928 Identifies the DNSSEC key.
Algorithm 13 DNSSEC algorithm number, commonly ECDSAP256SHA256.
Digest Type 2 Digest type number, commonly SHA-256.
Digest 9638b2da3ceaeb4d436ce0a62c87c0dc0141ebd69ee076422ee212e797efb331 The long hexadecimal digest value.

General Format

A DS record normally appears in this order:

<key tag> <algorithm> <digest type> <digest>

Do not include the letters DS in any field. Choose DS as the record type, then enter only the four values.

Before You Submit

  • Use the exact DS record provided by your DNSSEC tool, nameserver, or DNS hosting provider.
  • Keep the digest as one continuous hexadecimal string with no spaces.
  • If your DS record has different numbers than this example, use your own numbers.
  • After adding the DS record, submit the Root Zone DNS update transaction in Bob.