[dns-operations] It's begun...
Brett.Carr at nominet.org.uk
Thu Oct 24 21:12:14 UTC 2013
>On 24 Oct 2013, at 14:12, Chris Thompson <cet1 at cam.ac.uk<mailto:cet1 at cam.ac.uk>> wrote:
>At 13:01 23-10-2013, Edward Lewis wrote:
>My sensors show 4 new gTLDs in the last hour or so...IDN, non-ccTLD...added between 1800 and 1900 UTC.
>Not mentioned yet is that all four appeared already signed and with
>DS records in the root zone.
I *think* this is a condition of delegation.
>But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a bit
>broken, in that NXDOMAIN responses don't validate properly. Neither
>dnssec-debugger.verisignlabs.com nor dnsviz.net are able to analyse
>validations problems for NXDOMAIN responses, so I am not quite sure
>why yet, but e.g.
>dig +dnssec www.xn--80asehdb<http://www.xn--80asehdb>.
>dig +dnssec www.xn--80aswg<http://www.xn--80aswg>.
>give SERVFAILs which can be avoided by adding the +cd option.
I'm surprised this wasn't picked up as part of pre-delegation testing.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dns-operations