If you enable DNSSEC at the registrar, ensure DS records match your DNS host. Mismatched DNSSEC can make the domain appear offline globally. Disable DNSSEC temporarily during complex migrations if unsure.