[dns-operations] What's wrong with my domain?

[Hauke Lampe]

On 02.07.2014 12:29, Mohamed Lrhazi wrote:
> I am sure I messed up something, but cant figure out what! Some DNS
> servers, notably Google's, return SERVFAIL, since a couple of days now.

DNSSEC validation fails for your domain.

The DS record in .edu refers to a KSK with ID 3078 which doesn't match
either of the two KSK DNSKEYs in gu.edu.

More remarkably, Google Public DNS seems to have DNSSEC validation
enabled by default now, not depending on the query flags anymore.


HTH,
Hauke.