[dns-operations] .PL DNSSEC broken again
bert.hubert at powerdns.com
Mon Jun 17 07:48:04 UTC 2019
On the ever vigilant PowerDNS IRC channel, a big validating operator
reported seeing .pl bogus PowerDNS responses on apparently unsigned .pl
People looked into it and it appears .PL is handing out wrong NSEC3 records.
We have no better diagnosis at this point, but this is not good for DNSSEC
validation adoption. I hope .pl can look into this urgently.
More information about the dns-operations