[dns-operations] .PL DNSSEC broken again
krzysztof.orfinger at nask.pl
Mon Jun 17 12:01:07 UTC 2019
Thank you for bringing this to our attention. The NSEC3 chain is now
>> Date: Mon, 17 Jun 2019 09:48:04 +0200
>> From: bert hubert <bert.hubert at powerdns.com>
>> To: dns-operations at dns-oarc.net
>> Subject: .PL DNSSEC broken again
>> Hi everyone,
>> On the ever vigilant PowerDNS IRC channel, a big validating operator
>> reported seeing .pl bogus PowerDNS responses on apparently
>> unsigned .pl
>> domain names.
>> People looked into it and it appears .PL is handing out wrong
>> NSEC3 records.
>> We have no better diagnosis at this point, but this is not good
>> for DNSSEC
>> validation adoption. I hope .pl can look into this urgently.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dns-operations