[dns-operations] Was: .KE denial of existence partly broken? (Viktor Dukhovni)

[Calvin Browne]

Seems it is an issue with Afrinic's anycast and an older version of NSD 
- Afrinic said they'll fix it shortly.


--Calvin


On 16/07/2018 10:50, Calvin Browne wrote:
>
>
>> Today's Topics:
>>
>>     1. .KE denial of existence partly broken? (Viktor Dukhovni)
>>
>>
>> ----------------------------------------------------------------------
>>
>> Message: 1
>> Date: Sat, 14 Jul 2018 22:55:02 -0400
>> From: Viktor Dukhovni <ietf-dane at dukhovni.org>
>> To: dns-operations at dns-oarc.net
>> Subject: [dns-operations] .KE denial of existence partly broken?
>> Message-ID: <20180715025502.GK33554 at straasha.imrryr.org>
>> Content-Type: text/plain; charset=us-ascii
>>
>>
>> Not all the nameservers return NSEC records or SOA RRSIGs.
>>
>>      http://dnsviz.net/d/nic.ke/W0q0bg/dnssec/
>>      http://dnsviz.net/d/awesome.ke/W0q05w/dnssec/
>>
>
> We are serving what we are given at ns2.dns.business on NSD version 
> 4.1.17
>
> --Calvin