[dns-operations] Expired signatures in "mm" TLD

Mehmet Akcin mehmet at icann.org
Tue Jul 31 08:05:01 UTC 2012


Greetings Chris

as of  2012-07-31 08:02:12 UTC all seems to be OK.

Mehmet

On Jul 30, 2012, at 12:22 PM, Chris Thompson wrote:

> The signatures in the TLD "mm" (Myanmar) appear to have all expired at
> 2012-07-28 06:45:18 UTC. As they have a DS record in the root zone, this
> makes the whole subtree inaccessible to normally configured validating
> resolvers. http://dnssec-debugger.verisignlabs.com/mm confirms this.
> Does anyone have a working contact to get this fixed?
> 
> I noticed this only because http://stats.research.icann.org/dns/tld_report/
> dropped its count of signed TLDs from 98 to 96 [*]. It is slightly
> counter-intuitive that the DS for record for "mm" is still counted
> among the 89, while the line for "mm" has gone from green to white.
> 
> [*] The other zone involved is "tt" (Trinidad and Tobago) but that is
>    understandable as it is in a toe-in-the-water state with some of
>    its official nameservers serving a signed version and some an unsigned
>    one, and they are nowhere near having a DS in the root zone yet.
> 
> -- 
> Chris Thompson               University of Cambridge Computing Service,
> Email: cet1 at ucs.cam.ac.uk    New Museums Site, Cambridge CB2 3QH,
> Phone: +44 1223 334715       United Kingdom.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4367 bytes
Desc: not available
URL: <http://lists.dns-oarc.net/pipermail/dns-operations/attachments/20120731/d2e59fb8/attachment.bin>


More information about the dns-operations mailing list