[dns-operations] What's wrong with my domain?

Hauke Lampe lampe at hauke-lampe.de
Wed Jul 2 11:20:46 UTC 2014

On 02.07.2014 12:29, Mohamed Lrhazi wrote:
> I am sure I messed up something, but cant figure out what! Some DNS
> servers, notably Google's, return SERVFAIL, since a couple of days now.

DNSSEC validation fails for your domain.

The DS record in .edu refers to a KSK with ID 3078 which doesn't match
either of the two KSK DNSKEYs in gu.edu.

More remarkably, Google Public DNS seems to have DNSSEC validation
enabled by default now, not depending on the query flags anymore.


More information about the dns-operations mailing list