[dns-operations] Flush DNSSEC from Cache

Viktor Dukhovni ietf-dane at dukhovni.org
Wed Dec 18 17:07:40 UTC 2019


On Wed, Dec 18, 2019 at 07:06:56AM +0000, Jay, Tim wrote:

> Will you please flush adp.com from your caches if you are doing DNSSEC
> validation?

Are you able to share any information about why this might be necessary?

In the last two-plus years of doing daily DNSSEC/DANE surveys, including
all signed .com delegations, I've never run into DS records for adp.com.
Were DS RRs added prematurely in error in the last ~12 hours, and then
quickly removed?

-- 
    Viktor.



More information about the dns-operations mailing list