[dns-operations] DNSSEC validation failures for 54.in-addr.arpa

Chris Thompson cet1 at cam.ac.uk
Mon Dec 19 16:55:42 UTC 2011


On Dec 17 2011, I wrote:

>There seems to be a problem. The DS record in in-addr.arpa:
[...]
>doesn't match any of the DNSKEY records in the zone itself

The DS record has been fixed today.

It's unlikely anyone was adversely affected, as I believe 54.in-addr.arpa
was the final IPv4 /8 allocated to ARIN, and is not yet in real use. Only
[240-255].54.in-addr.arpa are delegated from it, and those delegations
are lame.

>[Cc'd to dns-ops at arin.net, nstld at iana.org]

nstld at iana.org bounces. A pity, because it is the SOA.rname for
for in-addr.arpa.

-- 
Chris Thompson               University of Cambridge Computing Service,
Email: cet1 at ucs.cam.ac.uk    New Museums Site, Cambridge CB2 3QH,
Phone: +44 1223 334715       United Kingdom.



More information about the dns-operations mailing list