casey at deccio.net
Fri May 21 13:57:57 UTC 2010
On Fri, May 21, 2010 at 2:05 AM, Stephane Bortzmeyer <bortzmeyer at nic.fr>wrote:
> It is "fixed" now (they've reduced the number of DNSKEYs, thus coming
> under 1500 bytes, but I don't know if the underlying network problem
> is corrected).
The underlying problem doesn't appear to be fixed (yet):
$ dig +dnssec @dns1.uspto.gov uspto.gov any
; <<>> DiG 9.6.1-P3 <<>> +dnssec @dns1.uspto.gov uspto.gov any
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached
> This morning, doc.gov is broken (yes, the thing that controls the DNS
> root). This time, it is a purely DNSSEC issue.
expired signatures... http://dnsviz.net/d/doc.gov/dnssec/
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dns-operations