[dns-operations] Anyone in Brazil know the fine folks at jus.br?

[Rubens Kuhl]

Hi @All. 

I'm flying back from DNS-OARC and will try shepherding the mentioned networks towards valid configurations when I get back to Brazil. 
Just a heads-up that jus.br <http://jus.br/> is not a single domain, it's a zone dedicated to courts where DNSSEC is mandatory. Initial delegation requires correctness before being introduced into our zone files, but later on users can unfortunately do a myriad of odd things. 

The listed domains are from 3 different state courts and one federal court, and they seem to have different failure modes. 


Rubens

> On May 15, 2017, at 7:28 PM, Marcus Grando <marcus at sbh.eng.br> wrote:
> 
> Hi Viktor, you can reach Rubens Kuhl or Frederico Neves cc'ed. They can indicate the right guys and flow.
> 
> Best regards
> 
> On Mon, May 15, 2017 at 12:11 PM, Viktor Dukhovni <ietf-dane at dukhovni.org <mailto:ietf-dane at dukhovni.org>> wrote:
> Below (attached JPEG) is a portion of the DNSViz display for
> 
> 	http://dnsviz.net/d/_25._tcp.mx1.trtrj.jus.br/dnssec/ <http://dnsviz.net/d/_25._tcp.mx1.trtrj.jus.br/dnssec/>
> 
> which exhibits an impressive array of issues:
> 
> <jus2.br.jpg>
> 
> Similar mess at:
> 
> 	http://dnsviz.net/d/_25._tcp.mx1.trt1.jus.br/dnssec/ <http://dnsviz.net/d/_25._tcp.mx1.trt1.jus.br/dnssec/>
> 
> Also less severe issues at:
> 
>   http://dnsviz.net/d/_25._tcp.mx2.tjce.jus.br/dnssec/ <http://dnsviz.net/d/_25._tcp.mx2.tjce.jus.br/dnssec/>     (Bad SOA RRSIG)
>   http://dnsviz.net/d/_25._tcp.lalavava.tse.jus.br/dnssec/ <http://dnsviz.net/d/_25._tcp.lalavava.tse.jus.br/dnssec/> (Drops TLSA queries)
> 
> I've not managed to reach responsive contacts for the associated domains:
> 
> trtrj.jus.br <http://trtrj.jus.br/>
> trt1.jus.br <http://trt1.jus.br/>
> tjce.jus.br <http://tjce.jus.br/>
> tse.jus.br <http://tse.jus.br/>
> 
> If anyone in Brasil knows how to reach the right folks at jus.br <http://jus.br/> or the specific
> domains, please drop them a note.  These domains have longstanding DNS issues
> that need to be addressed.
> 
> -- 
> 	Viktor.
> 
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net <mailto:dns-operations at lists.dns-oarc.net>
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations <https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-operations> mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations <https://lists.dns-oarc.net/mailman/listinfo/dns-operations>
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20170515/4628b9dc/attachment.html>