[dns-operations] Anyone with contacts at Paypal and/or Ultradns?

[DeJong, Steve]

UltraDNS has identified an issue with NSEC signed zones with empty-non-terminals.  We are working to correct this behavior and plan to have a fix deployed shortly after the new year.

- Steve De Jong

On Dec 28, 2019, at 9:59 AM, Viktor Dukhovni <ietf-dane at dukhovni.org<mailto:ietf-dane at dukhovni.org>> wrote:

On Sat, Dec 28, 2019 at 04:47:27PM +0000, Matt Nordhoff wrote:

It looks like this is a more widespread Neustar issue. A domain using
Namecheap's DNS service -- which now outsources the DNS servers to
Neustar -- ran into the same issue.

...

Namecheap and PayPal could still be using the same software at another
point in their stacks, but it seems more likely that the problem is on
Neustar's end.

Again not clear whether the zone is signed by Neustar, or they're just serving
a replica that was incorrectly signed elsewhere.

--
   Viktor.
_______________________________________________
dns-operations mailing list
dns-operations at lists.dns-oarc.net<mailto:dns-operations at lists.dns-oarc.net>
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.dns-2Doarc.net_mailman_listinfo_dns-2Doperations&d=DwICAg&c=MOptNlVtIETeDALC_lULrw&r=dDmVb52uNro62vP-w97PFD14RmhK5frGLUBkTeDmEC0&m=JqLYCsYWyaVEbTxyywQDZxQdMnygJz6fV6fho92kxcI&s=YljKKKxwzwI57brbcCagtIP0D22yWnEwh0t9VkOay_8&e=

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20191231/23bc1644/attachment.html>