[dns-operations] google DNS doing validation?

[Stephane Bortzmeyer]

On Thu, Jul 26, 2018 at 09:02:44AM -0500,
 frnkblk at iname.com <frnkblk at iname.com> wrote 
 a message of 95 lines which said:

> FYI, servfail.nl hasn't been working properly since about 6:40
> U.S. Central.  DNSsec resolution did not properly fail

Indeed, it works, this is why it is broken :-)

Seriously, the problem does not seem consistent: some RIPE Atlas
probes with validation can resolve servfail.nl (the 11), others get a
SERVFAIL (44 of them, the rest apparently do not validate).

% blaeu-resolve --dnssec -r 100 -q SOA --displayvalidation servfail.nl.
[li1.forfun.net. hostmaster.forfun.net. 1532606883 86400 7200 2419200 60] : 41 occurrences 
[ (Authentic Data flag)  li1.forfun.net. hostmaster.forfun.net. 1532606883 86400 7200 2419200 60] : 11 occurrences 
[ERROR: SERVFAIL] : 44 occurrences 
Test #15398937 done at 2018-07-26T14:59:06Z