[dns-operations] .biz DNSSEC failure?
paul at cypherpunks.ca
Sat Jun 22 18:51:01 UTC 2013
On Sat, 22 Jun 2013, staticsafe wrote:
> .biz seems to be failing at DNSSEC validation, none of my validating
> resolvers are able to resolve biz. or any domains underneath.
"None of the 5 DNSKEY records could be validated by any of the 2 DS records"
I guess a botched KSK rollover or a DS record miscommunication.....
It's something that a signer solution should really check for before
allowing a zone to be pushed, even if that means some kind of internet
connectivity to get those DS records.
More information about the dns-operations