Hi Steffen, On 3/9/21 1:35 PM, Steffan via Pdns-users wrote: > This domain is not using a A record > > But a ALIAS and CNAME > > Is that why dnssec failes? Yes, see https://doc.powerdns.com/authoritative/guides/alias.html#alias-and-dnssec Cheers, Pieter -- Pieter Lexis PowerDNS.COM BV -- https://www.powerdns.com