[dns-operations] It's begun...
andreev.peter at gmail.com
Tue Nov 5 17:55:59 UTC 2013
2013/11/5 Matthäus Wander <matthaeus.wander at uni-due.de>
> * Peter Andreev [2013-11-05 16:26]:
> > 2013/10/31 Chris Thompson <cet1 at cam.ac.uk <mailto:cet1 at cam.ac.uk>>
> > On Oct 24 2013, I wrote:
> > [...]
> > But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a
> > broken, in that NXDOMAIN responses don't validate properly.
> > and there were some followups.
> > Just to note that this has been fixed by now - the right NSEC3
> > and their signatures are being returned.
> > We met very similar symptoms when we were signing our zones. BIND
> > simply didn't generate NSEC3 unless restarted.
> The operator of xn--80asehdb. and xn--80aswg. is using a custom-made
> name server according to their version.bind.
Their version.bind looks REFUSED for me. AFAIK this is the default
behaviour of all major nameserver implementations. So I'm not sure if they
use modified BIND or completely selfmade server.
> Universität Duisburg-Essen
> Verteilte Systeme
> Bismarckstr. 90 / BC 316
> 47057 Duisburg
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> dns-jobs mailing list
Is there any problem Exterminatus cannot solve? I have not found one yet.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dns-operations