kalou

https://tools.ietf.org/html/draft-ietf-regext-dnsoperator-to-rrr-protocol-04

1/ Check if service is available for your TLD:

In [15]: sess.get('https://rdap.gandi.net/domain/rdap.lol').json()['links']
Out[15]: [... {'href': 'https://cdscheck.gandi.net/v1/domains/rdap.lol/cds',
  'rel': 'https://rdap.io/tpda/cdscheck'}]

2/ Publish your CDS and sign it with your existing DNSKEY - make sure everything is signed by the new keys on all nameservers.
The checker is going the validate that as well.

kalou

https://tools.ietf.org/html/draft-ietf-regext-dnsoperator-to-rrr-protocol-04

1/ Check if service is available for your TLD:

In [15]: sess.get('https://rdap.gandi.net/domain/rdap.lol').json()['links']
Out[15]: [... {'href': 'https://cdscheck.gandi.net/v1/domains/rdap.lol/cds',
  'rel': 'https://rdap.io/tpda/cdscheck'}]

2/ Enable DNSSEC for domain:
In [12]: sess.post('https://dns.api.gandi.net/api/v5/domains/rdap.lol/keys', json={'flags': 257})

kalou

Keybase proof

I hereby claim:

• I am kalou on github.
• I am kalou (https://keybase.io/kalou) on keybase.
• I have a public key ASATDOdAokp_nWsBdHqrrPFLL3uqaivD7vS53ZwYPFxPkwo

To claim this, I am signing this object: