[dns-operations] 172.in-addr.arpa DNSSEC broken

Casey Deccio casey at deccio.net
Tue May 20 20:27:43 UTC 2014


On Tue, May 20, 2014 at 4:22 PM, Stephane Bortzmeyer <bortzmeyer at nic.fr>wrote:

> The problem is indeed in
> 172.in-addr.arpa (botched rollover, it seems, old KSK 30729 removed
> from the zone while the DS was - is - still in many caches).
>

Not only in caches, but while it was still being served from the
in-addr.arpa parent zone.

http://dnsviz.net/d/172.in-addr.arpa/U3tPeg/dnssec/

Casey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20140520/651173fb/attachment.html>


More information about the dns-operations mailing list