[dns-operations] Strange behavior of covid.cdc.gov

Yasuhiro Orange Morishita / 森下泰宏 yasuhiro at jprs.co.jp
Mon Aug 31 13:12:04 UTC 2020


Hi,

Now covid.cdc.gov seems to be DNSSEC validation error.
Google Public DNS and some DNSSEC-enabled resolvers return SERVFAIL.
e.g. dig covid.cdc.gov @8.8.8.8

But it seems to be a little bit strange.  The auth servers of cdc.gov
zone serve unneed (and unsigned) akam.cdc.gov zone.  But they still
have DS RR for real akam.cdc.gov zone.

This is output of digs.
<https://www.dropbox.com/s/alfb1ftvzpd6qcv/20200831-covid.cdc.gov.txt>

-- Orange



More information about the dns-operations mailing list