[dns-operations] DNSSEC validation failures for .KE

Stephane Bortzmeyer bortzmeyer at nic.fr
Tue Mar 31 14:38:48 UTC 2015


They published again key 37471, which was removed while still being
pointed at by the DS...

But with expired signatures!

ke.                     14348 IN RRSIG DNSKEY 5 1 14400 (
                                20140831155438 20140801145438 37471 ke.
                                hZjCZSIT1T2r+U+Etk8UQJBTR0Ks/WrDXi67AIAyQs2U
                                0ZMfspmKJWOunERRzcJyS01jWXwb0VQomS52zG/Ot7Tu
                                KFVmJQ9J+YCvhCwZFidH5KfIiGmzYKDKUigGjYdaDC1G
                                h++GeTXEkJGV+626lD8vUw7kehH5UGumKIhy1ZPZzuuN
                                G0r0G+7bNUWdrIuVxF189iPoUZJlwXDD80nkwUHrRB+m
                                ebA6zDNUrGa+3LaAPaNuGm9zYhzVZmn6oFhwrOjLKHVn
                                wVX/UwXD4ztJXWiPEt0E8ZPEAGZ4vHyRQ+yEOYRYX6KX
                                7losOepWaqaLMGmE8a6w80uOaswQmjepUg== )

So, still broken.



More information about the dns-operations mailing list