[dns-operations] Funny DNSSEC problem

[Mark Andrews]

In message <20150407193703.GA32176 at sources.org>, Stephane Bortzmeyer writes:
> 
> I suspect that the resolvers at Free have been corrupted in some way
> (the CNAME duplication) but I wonder what would cause that?

I think you are seeing 2 bugs.

* The duplicate records shouldn't cause a validation failure, they
  should be removed when processing the answer.

* There is a bug in whatever piece of software is generating that
  result causing the qname not to pick up the target of the cname
  record prior to looping.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org