[dns-operations] nhc.noaa.gov expired signatures

Casey Deccio casey at deccio.net
Thu Jun 24 17:41:48 UTC 2010

On Thu, Jun 24, 2010 at 10:15 AM, Edward Lewis <Ed.Lewis at neustar.biz> wrote:
> There's the root at nhc-hp12.nhc.noaa.gov. address indicated in the SOA RR, but
> you get that by relaxing DNSSEC.  Further, you then have to relax your
> mailer's use of DNSSEC to send to them.

Not only that, but emails I've sent to that address have bounced after
delivery times out.  My luck has probably been 50/50 with contacting
admins using the RNAME field listed in the SOA RR.  I'm not sure if
that statistic is good or bad :)  Last week I emailed the noaa.gov DNS
admin, who forwarded on the message to the admins of the delegated
zone, but apparently it hasn't been fixed yet...  I'll send a
follow-up message.


More information about the dns-operations mailing list