[dns-operations] .PL DNSSEC broken again

[Krzysztof Orfinger]

Hi all,

Thank you for bringing this to our attention. The NSEC3 chain is now 
operating properly.

Krzysztof

>
>>      Date: Mon, 17 Jun 2019 09:48:04 +0200
>>      From: bert hubert <bert.hubert at powerdns.com>
>>      To: dns-operations at dns-oarc.net
>>      Subject: .PL DNSSEC broken again
>>
>>      Hi everyone,
>>
>>      On the ever vigilant PowerDNS IRC channel, a big validating operator
>>      reported seeing .pl bogus PowerDNS responses on apparently
>>     unsigned .pl
>>      domain names.
>>
>>      People looked into it and it appears .PL is handing out wrong
>>     NSEC3 records.
>>
>>      We have no better diagnosis at this point, but this is not good
>>     for DNSSEC
>>      validation adoption. I hope .pl can look into this urgently.
>>
>>        Bert
>>
>>
>>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20190617/1eb291e3/attachment.html>