[dns-operations] It's begun...

Peter Andreev andreev.peter at gmail.com
Tue Nov 5 15:26:34 UTC 2013


2013/10/31 Chris Thompson <cet1 at cam.ac.uk>

> On Oct 24 2013, I wrote:
>
> [...]
>
>> But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a bit
>>
>> broken, in that NXDOMAIN responses don't validate properly.
>>
>
> and there were some followups.
>
> Just to note that this has been fixed by now - the right NSEC3 records
> and their signatures are being returned.


We met very similar symptoms when we were signing our zones.  BIND simply
didn't generate NSEC3 unless restarted.


>
>
> --
> Chris Thompson               University of Cambridge Computing Service,
> Email: cet1 at ucs.cam.ac.uk    Roger Needham Building, 7 JJ Thomson Avenue,
> Phone: +44 1223 334715       Cambridge CB3 0RB, United Kingdom.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>



-- 
Is there any problem Exterminatus cannot solve? I have not found one yet.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20131105/35ae3005/attachment.html>


More information about the dns-operations mailing list