[dns-operations] broken insecure NSEC3 denials from some .pl servers

Peter van Dijk peter.van.dijk at powerdns.com
Tue Feb 26 14:51:19 UTC 2019


On 26 Feb 2019, at 14:07, Peter van Dijk wrote:

> we have been getting reports of validation failures for unsigned .pl 
> domains these last few days. Upon investigation, we found that some of 
> their auths are serving the wrong NSEC3 records for the denial.

All auths now give correct answers as far as I can see. I have no 
further details on what happened.

Kind regards,
-- 
Peter van Dijk
PowerDNS.COM BV - https://www.powerdns.com/


More information about the dns-operations mailing list