[dns-operations] DNSKEY RRSIGs expired on xn--3bst00m & xn--6qq986b3xl

Chris Thompson cet1 at cam.ac.uk
Thu Apr 10 18:48:09 UTC 2014

The signatures on the DNSKEY RRsets for two of the new generic TLDs have
expired (other RRSIGs seem to be OK):

  xn--3bst00m      start 2014-03-25 20:19:00  end 2014-04-09 01:26:10 UTC
  xn--6qq986b3xl   start 2014-03-25 12:19:01  end 2014-04-08 18:27:11 UTC

http://dnssec-debugger.verisignlabs.com/ agrees with me.

Is it significant that both TLDs were created on 2014-01-03?
http://newgtlds.icann.org/en/program-status/delegated-strings ascribes
them to different organisations, but they are hosted on the same
nameservers (zdnscloud.com).

Chris Thompson               University of Cambridge Information Services,
Email: cet1 at uis.cam.ac.uk    Roger Needham Building, 7 JJ Thomson Avenue,
Phone: +44 1223 334715       Cambridge CB3 0RB, United Kingdom.

More information about the dns-operations mailing list