[dns-operations] DNSSEC validation - salliemae.com

Robert Blayzor rblayzor.bulk at inoc.net
Thu Aug 8 19:09:06 UTC 2019

On 8/8/19 2:55 PM, Scott Morizot wrote:
> Sorry. That was a typo. Secure alias pointing to a label that validates
> as *insecure* in a validated insecure domain. Looks like a CDN, though I
> didn't recognize that specific one at a glance. 

The error I get in unbound when trying to look up www.salliemae.com

info: validation failure <www.salliemae.com. A IN>: No DNSKEY record for
key salliemae.com. while building chain of trust

I am using the auto-trust-anchor in unbound.
auto-trust-anchor-file: "root.key"

which has DNS key date Fri Feb 23 00:30:05 2018

Anyone else using unbound resolver having this particular issue?

XMPP: rblayzor.AT.inoc.net
PGP:  https://pgp.inoc.net/rblayzor/

More information about the dns-operations mailing list