[dns-operations] fbi.gov sigs expired [was:Trend/ISC DNS Changer takedown]

[Chris Thompson]

On Nov 10 2011, Dobbins, Roland wrote:

>
><http://krebsonsecurity.com/2011/11/malware-click-fraud-kingpins-arrested-in-estonia/>
>	
><http://blog.trendmicro.com/esthost-taken-down-%E2%80%93-biggest-cybercriminal-takedown-in-history/>

After passing on these links to our CERT people here, one of them just came
and asked me why www.fbi.gov apparently no longer existed. "Have we been
hacked? Have they?"

Well, no. It seems that the DNSSEC signatures on the fbi.gov zone expired
2011-11-10 17:37:26 UTC and have not yet been replaced ... :-(

-- 
Chris Thompson               University of Cambridge Computing Service,
Email: cet1 at ucs.cam.ac.uk    New Museums Site, Cambridge CB2 3QH,
Phone: +44 1223 334715       United Kingdom.