> Is this an expected behavior or an issue with my current version? I > couldn't find any info about this. CNAME and other data is expressly forbidden per RFC. [1] As every zone MUST have SOA and NS records, a CNAME at zone apex is forbidden. -JP [1] Exception: DNSSEC data