My website is currently inaccessible due to the presence of a DS record in the parent zone, when I am using nameservers that don't support DNSSEC. See this question for more context.
I am using Amazon Route 53 as my registrar, and I can't see a way to remove the DS record using the interface. I tried the following steps, but it didn't work.
- Initially I was using Amazon Route 53 nameservers, which does not support DNSSEC. Therefore in the "DNSSEC Status" section it said "If you use a DNS service provider other than Route 53 and if the TLD registry supports DNSSEC, you can add and delete public keys from the TLD registry for the domain."
- I changed the namservers to Cloudflare's.
- I added a public key
- I removed the public key.
- I changed the nameservers back to Amazon's
However this did not work. "dig ds markfisher.photo" still shows a DS record and my website is still inaccessibly.
How can I remove the DS record? I can't transfer to another registrar, as I transferred the domain to Amazon within the last 60 days (much more recently in fact). Also I do not have a support package with AWS, so I can't get human help :(
Do I need to wait longer between performing the above steps, perhaps?