[dns-operations] DNSSEC validation failures for .KE

Anand Buddhdev anandb at ripe.net
Tue Mar 31 11:37:51 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Wouter Wijngaards just alerted me to validation failures for .KE
(Kenya). I tried to call KENIC, but their phone numbers are all
unreachable.

If anyone has local contacts in Kenya or nearby, please alert them!

http://dnsviz.net/d/ke/VRp4ag/dnssec/

Their current DS record points to a key that has the revoke bit set,
but it is no longer signing the DNSKEY rrset.

Regards,

Anand Buddhdev
RIPE NCC
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAlUahw8ACgkQi+U8Q0SwlCtKAQCfX3kq7G+YN4oKbQuQBbI6bybV
/NcAn33VsMdFZnW1/rSddTEBqx2TKTgf
=O224
-----END PGP SIGNATURE-----



More information about the dns-operations mailing list