[dns-operations] DNSSEC deployment in Sweden
lists at kjette.se
Mon Jan 2 21:16:43 UTC 2012
I can't say that we have stumbled upon that situation as far as I know.
I only know of one thing that we are looking into with Telia (they run
BIND) and if we have signed zones with *.domain.tld wildcard and they
are trying to reach www.sub.domain.tld it fails if they not having
sub.domain.tld and *.sub.domain.tld added in the domain.tld zone. But we
are still looking into that.
Do you have more information about your report?
E-mail: kjetil.jensen at binero.se
Switchboard #: +46 771-24 08 00
Direct #: +46 8-525 090 55 Ext: #1007
Cell #: +46 76 83 80 300
On 2012-01-02 19:13, Eric Ziegast wrote:
>> On Wed, Dec 28, 2011 at 04:23:04PM +0100, Kjetil Jensen wrote:
>>> The process has gone very smoothly,
> Have there been any reports of timing issues between the publishing of
> the signed key material by .SE and the signing of the zones
> themselves? For example, is there a brief period of time where
> validation for one of the newly-signed zones could have failed?
> We're trying to debug one report where we suspect some SE domains
> failed validation on recursive servers and cached the fact that the
> validation failed.
> Eric Ziegast
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> dns-jobs mailing list
More information about the dns-operations