[dns-operations] Expired signatures in "mm" TLD

Chris Thompson cet1 at cam.ac.uk
Mon Jul 30 19:22:13 UTC 2012


The signatures in the TLD "mm" (Myanmar) appear to have all expired at
2012-07-28 06:45:18 UTC. As they have a DS record in the root zone, this
makes the whole subtree inaccessible to normally configured validating
resolvers. http://dnssec-debugger.verisignlabs.com/mm confirms this.
Does anyone have a working contact to get this fixed?

I noticed this only because http://stats.research.icann.org/dns/tld_report/
dropped its count of signed TLDs from 98 to 96 [*]. It is slightly
counter-intuitive that the DS for record for "mm" is still counted
among the 89, while the line for "mm" has gone from green to white.

[*] The other zone involved is "tt" (Trinidad and Tobago) but that is
    understandable as it is in a toe-in-the-water state with some of
    its official nameservers serving a signed version and some an unsigned
    one, and they are nowhere near having a DS in the root zone yet.

-- 
Chris Thompson               University of Cambridge Computing Service,
Email: cet1 at ucs.cam.ac.uk    New Museums Site, Cambridge CB2 3QH,
Phone: +44 1223 334715       United Kingdom.



More information about the dns-operations mailing list