[dns-operations] .PL DNSSEC broken again

bert hubert bert.hubert at powerdns.com
Mon Jun 17 07:48:04 UTC 2019

Hi everyone,

On the ever vigilant PowerDNS IRC channel, a big validating operator
reported seeing .pl bogus PowerDNS responses on apparently unsigned .pl
domain names.

People looked into it and it appears .PL is handing out wrong NSEC3 records.

We have no better diagnosis at this point, but this is not good for DNSSEC
validation adoption. I hope .pl can look into this urgently.


More information about the dns-operations mailing list