[dns-operations] It's begun...

[Brett Carr]

>On 24 Oct 2013, at 14:12, Chris Thompson <cet1 at cam.ac.uk<mailto:cet1 at cam.ac.uk>> wrote:


>At 13:01 23-10-2013, Edward Lewis wrote:

>My sensors show 4 new gTLDs in the last hour or so...IDN, non-ccTLD...added between 1800 and 1900 UTC.

>Not mentioned yet is that all four appeared already signed and with
>DS records in the root zone.

I *think* this is a condition of delegation.


>But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a bit
>broken, in that NXDOMAIN responses don't validate properly. Neither
>dnssec-debugger.verisignlabs.com nor dnsviz.net are able to analyse
>validations problems for NXDOMAIN responses, so I am not quite sure
>why yet, but e.g.

>dig +dnssec www.xn--80asehdb<http://www.xn--80asehdb>.
>dig +dnssec www.xn--80aswg<http://www.xn--80aswg>.

>give SERVFAILs which can be avoided by adding the +cd option.

I'm surprised this wasn't picked up as part of pre-delegation testing.

Brett


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20131024/5882a114/attachment.html>