[dns-operations] DNSSEC deployment in Sweden

[Kjetil Jensen]

I can't say that we have stumbled upon that situation as far as I know.

I only know of one thing that we are looking into with Telia (they run
BIND) and if we have signed zones with *.domain.tld wildcard and they
are trying to reach www.sub.domain.tld it fails if they not having
sub.domain.tld and *.sub.domain.tld added in the domain.tld zone. But we
are still looking into that.

Do you have more information about your report?

Kindest Regards

Kjetil Jensen
--------------------------------
Binero AB
E-mail: kjetil.jensen at binero.se
Switchboard #: +46 771-24 08 00
Direct #: +46 8-525 090 55 Ext: #1007
Cell #: +46 76 83 80 300

On 2012-01-02 19:13, Eric Ziegast wrote:
>> On Wed, Dec 28, 2011 at 04:23:04PM +0100, Kjetil Jensen wrote:
>>> The process has gone very smoothly,
> 
> Have there been any reports of timing issues between the publishing of
> the signed key material by .SE and the signing of the zones
> themselves?  For example, is there a brief period of time where
> validation for one of the newly-signed zones could have failed?
> 
> We're trying to debug one report where we suspect some SE domains
> failed validation on recursive servers and cached the fact that the
> validation failed.
> 
> --
> Eric Ziegast
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs