[dns-operations] DNSSEC validation - salliemae.com

[Robert Blayzor]

On 8/8/19 2:55 PM, Scott Morizot wrote:
> 
> Sorry. That was a typo. Secure alias pointing to a label that validates
> as *insecure* in a validated insecure domain. Looks like a CDN, though I
> didn't recognize that specific one at a glance. 


The error I get in unbound when trying to look up www.salliemae.com

info: validation failure <www.salliemae.com. A IN>: No DNSKEY record for
key salliemae.com. while building chain of trust


I am using the auto-trust-anchor in unbound.
auto-trust-anchor-file: "root.key"

which has DNS key date Fri Feb 23 00:30:05 2018


Anyone else using unbound resolver having this particular issue?

-- 
inoc.net!rblayzor
XMPP: rblayzor.AT.inoc.net
PGP:  https://pgp.inoc.net/rblayzor/