[dns-operations] Cloudflare DNS resolver (1.1.1.1): Weird DNSSEC race condition

Viktor Dukhovni ietf-dane at dukhovni.org
Thu Aug 9 14:56:48 UTC 2018



> On Aug 9, 2018, at 6:42 AM, Tony Finch <dot at dotat.at> wrote:
> 
> 2xTTL agrees with what was observed during the recent .se algorithm rollover
> 
> https://www.sidnlabs.nl/a/weblog/keep-m-rolling-monitoring-ses-dnssec-algorithm-rollover

One might also take into account any delay in getting updated
copies of the zone data to all secondary servers.  The clock
should probably start from the time that all have been verified
to have up-to-date zone content.

-- 
	Viktor.





More information about the dns-operations mailing list