[dns-operations] Problems resolving .gov using DLV

[Stephane Bortzmeyer]

On Mon, Mar 16, 2009 at 01:54:42PM -0700,
 Michael Sinatra <michael at rancid.berkeley.edu> wrote 
 a message of 38 lines which said:

> Is anyone else having problems resolving .gov using the ISC DLV?  

Same problem for me, both with BIND and Unbound.

16-Mar-2009 22:05:00.387 dnssec: debug 3:   validating
@0x7fbba4af03c0: VVSOMCNUB7A79EALVJEH4VN12192C715.gov TYPE50:
DNS_R_COVERINGNSEC
16-Mar-2009 22:05:00.387 dnssec: debug 3:   validating
@0x7fbba4af03c0: VVSOMCNUB7A79EALVJEH4VN12192C715.gov TYPE50: covering
nsec found: 'VVSOMCNUB7A79EALVJEH4VN12192C715.gov.dlv.isc.org'
'gov.dlv.ISC.org' 'rubin.org.il.dlv.isc.org'
16-Mar-2009 22:05:00.387 dnssec: debug 3:   validating
@0x7fbba4af03c0: VVSOMCNUB7A79EALVJEH4VN12192C715.gov TYPE50: looking
for DLV gov.dlv.isc.org
16-Mar-2009 22:05:00.387 dnssec: debug 3:   validating
@0x7fbba4af03c0: VVSOMCNUB7A79EALVJEH4VN12192C715.gov TYPE50: DLV gov
found
16-Mar-2009 22:05:00.387 dnssec: debug 3:   validating
@0x7fbba4af03c0: VVSOMCNUB7A79EALVJEH4VN12192C715.gov TYPE50:
dlv_validator_start
16-Mar-2009 22:05:00.387 dnssec: debug 3:   validating
@0x7fbba4af03c0: VVSOMCNUB7A79EALVJEH4VN12192C715.gov TYPE50:
restarting using DLV
16-Mar-2009 22:05:00.387 dnssec: debug 3:   validating
@0x7fbba4af03c0: VVSOMCNUB7A79EALVJEH4VN12192C715.gov TYPE50:
attempting positive response validation
16-Mar-2009 22:05:00.387 dnssec: info:   validating @0x7fbba4af03c0:
VVSOMCNUB7A79EALVJEH4VN12192C715.gov TYPE50: no valid signature found