[dns-operations] DNSSEC validation failures for .KE

Richard Lamb richard.lamb at icann.org
Tue Mar 31 17:25:02 UTC 2015


Thank you. Seems better now.  Looks like you just rolled back.  Automated
systems like in-line signing do have their quirks.  -Rick

-----Original Message-----
From: dns-operations [mailto:dns-operations-bounces at dns-oarc.net] On Behalf
Of Samson Oduor
Sent: Tuesday, March 31, 2015 4:50 AM
To: Anand Buddhdev
Cc: dnssec-deployment; dns-operations at dns-oarc.net
Subject: Re: [dns-operations] DNSSEC validation failures for .KE

Hi Anand,

I am currently in Kenya - I am in touch with the engineers working on-site
on the problem - they have contacted IANA.


You can ping me as a proxy to communicate to them.




Cheers



S

On 3/31/2015 2:37 PM, Anand Buddhdev wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Wouter Wijngaards just alerted me to validation failures for .KE
> (Kenya). I tried to call KENIC, but their phone numbers are all
> unreachable.
>
> If anyone has local contacts in Kenya or nearby, please alert them!
>
> http://dnsviz.net/d/ke/VRp4ag/dnssec/
>
> Their current DS record points to a key that has the revoke bit set,
> but it is no longer signing the DNSKEY rrset.
>
> Regards,
>
> Anand Buddhdev
> RIPE NCC
> -----BEGIN PGP SIGNATURE-----
> Comment: GPGTools - http://gpgtools.org
>
> iEYEARECAAYFAlUahw8ACgkQi+U8Q0SwlCtKAQCfX3kq7G+YN4oKbQuQBbI6bybV
> /NcAn33VsMdFZnW1/rSddTEBqx2TKTgf
> =O224
> -----END PGP SIGNATURE-----
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>
>    

_______________________________________________
dns-operations mailing list
dns-operations at lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4996 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20150331/0453300e/attachment.bin>


More information about the dns-operations mailing list