[dns-operations] .biz DNSSEC failure?

[Paul Wouters]

On Sat, 22 Jun 2013, staticsafe wrote:

> .biz seems to be failing at DNSSEC validation, none of my validating
> resolvers are able to resolve biz. or any domains underneath.

"None of the 5 DNSKEY records could be validated by any of the 2 DS records"

I guess a botched KSK rollover or a DS record miscommunication.....

It's something that a signer solution should really check for before
allowing a zone to be pushed, even if that means some kind of internet
connectivity to get those DS records.

Paul