[dns-operations] 172.in-addr.arpa DNSSEC broken

[Casey Deccio]

On Tue, May 20, 2014 at 4:22 PM, Stephane Bortzmeyer <bortzmeyer at nic.fr>wrote:

> The problem is indeed in
> 172.in-addr.arpa (botched rollover, it seems, old KSK 30729 removed
> from the zone while the DS was - is - still in many caches).
>

Not only in caches, but while it was still being served from the
in-addr.arpa parent zone.

http://dnsviz.net/d/172.in-addr.arpa/U3tPeg/dnssec/

Casey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20140520/651173fb/attachment.html>