[dns-operations] .ES problems with NSEC3

Thu Jan 4 14:32:54 UTC 2018

On Wed, Jan 03, 2018 at 10:29:06AM +0000,
 Jerry Lundström <jerry at dns-oarc.net> wrote 
 a message of 21 lines which said:

> "RRSIG NSEC3 proving non-existence of museodelprado.es/DS alg 8, id 36970: The
> cryptographic signature of the RRSIG RR does not properly validate."

There have been several attemps to fix the problem today. This one is
nice: publishing both the DS and a NSEC3 record proving the DS does
not exist.

http://dnsviz.net/d/museodelprado.es/Wk4rjA/dnssec/