[dns-operations] Google Resolver Validation

[Yunhong Gu]

Thanks, I am investigating.

On Wed, Apr 1, 2015 at 11:17 AM, Brett <brettcarr at gmail.com> wrote:

> 1  gw-vlan100 (213.248.204.1)  0.512 ms  0.320 ms  0.292 ms
>  2  213.248.252.201 (213.248.252.201)  1.242 ms  1.036 ms  0.994 ms
>  3  nomfwlp01-reth4-414 (213.248.252.35)  2.731 ms  2.662 ms  2.691 ms
>  4  nomfwlp01-ge-0-0-2 (213.248.252.249)  3.559 ms  3.561 ms  3.524 ms
>  5  dc2nombgprp01-pc2 (213.248.252.4)  16.188 ms  4.050 ms  3.798 ms
>  6  195.66.236.125 (195.66.236.125)  918.570 ms  709.130 ms  656.792 ms
>  7  216.239.47.177 (216.239.47.177)  5.653 ms
>     216.239.47.179 (216.239.47.179)  5.364 ms
>     216.239.47.175 (216.239.47.175)  5.085 ms
>  8  72.14.237.41 (72.14.237.41)  5.498 ms
>     72.14.239.43 (72.14.239.43)  5.829 ms
>     216.239.47.45 (216.239.47.45)  5.689 ms
>  9  google-public-dns-a.google.com (8.8.8.8)  5.296 ms  5.345 ms  5.439 ms
>
> I just sent ten queries for:
>
> dig @8.8.8.8 verisign.com a +dnssec
>
> six of them came back with the AD bit set and four answered with no AD bit.
>
> Brett
>
>
>
>
>
> On 1 April 2015 at 16:13, Yunhong Gu <guu at google.com> wrote:
>
>> Hi, Brett,
>>
>> Can you tell me which Google server responded your requests? (traceroute
>> 8.8.8.8 should do).
>>
>> Yunhong
>>
>> On Wed, Apr 1, 2015 at 10:57 AM, Brett <brettcarr at gmail.com> wrote:
>>
>>> I am currently seeing a proportion (about 50%) of queries to 8.8.8.8 not
>>> returning an AD bit.
>>> Anybody else seeing the same?
>>> Warren: do you have any ideas what is happening here (Is this a DNSSEC
>>> April Fool?)
>>>
>>> oh and I do like todays com.google :)
>>>
>>> --
>>> Brett
>>>
>>> _______________________________________________
>>> dns-operations mailing list
>>> dns-operations at lists.dns-oarc.net
>>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>>> dns-jobs
>>> <https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-jobs>
>>> mailing list
>>> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>>>
>>
>>
>
>
> --
> Brett
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20150401/966e35c2/attachment.html>