[dns-operations] Expired DNSSEC signatures in .gov

Hauke Lampe lampe at hauke-lampe.de
Sun Sep 2 04:00:19 UTC 2012


Some anycast instances of .gov serve expired signatures:

> gov. 172800 IN NS a.gov-servers.net.
> gov. 172800 IN NS b.gov-servers.net.
> gov. 172800 IN RRSIG NS 7 1 172800 20120901220017 20120827220017 31918 gov. [...]

I get expired signatures from instances near EDGE-FO.NYC3.VERISIGN.COM,
good signatures from SFO and CHI.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20120902/3eb89de3/attachment.sig>

More information about the dns-operations mailing list