[dns-operations] DNS issues with .MIL

[Stephane Bortzmeyer]

On Sun, Jun 07, 2015 at 11:18:11PM +0200,
 Jaap Akkerhuis <jaap at NLnetLabs.nl> wrote 
 a message of 12 lines which said:

> There are also expired sigs etc., see <http://dnssec-debugger.verisignlabs.com/stratcom.mil>.

And kingfisher1.stratcom.mil reply NXDOMAIN (with aa and ra...) to a
request for a domain it is not authoritative for...

% dig @143.250.3.75 SOA af                                        

; <<>> DiG 9.9.5-9-Debian <<>> @143.250.3.75 SOA af
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43222
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;af.                    IN SOA

;; AUTHORITY SECTION:
.                       0 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. (
                                2015052801 ; serial
                                1800       ; refresh (30 minutes)
                                900        ; retry (15 minutes)
                                604800     ; expire (1 week)
                                86400      ; minimum (1 day)
                                )

;; Query time: 603 msec
;; SERVER: 143.250.3.75#53(143.250.3.75)
;; WHEN: Mon Jun 08 10:23:38 CEST 2015
;; MSG SIZE  rcvd: 106


I hope that these people are more serious with strategic nuclear
bombers...