[dns-operations] Strange behavior of covid.cdc.gov

Yasuhiro Orange Morishita / 森下泰宏 yasuhiro at jprs.co.jp
Mon Aug 31 13:12:04 UTC 2020


Now covid.cdc.gov seems to be DNSSEC validation error.
Google Public DNS and some DNSSEC-enabled resolvers return SERVFAIL.
e.g. dig covid.cdc.gov @

But it seems to be a little bit strange.  The auth servers of cdc.gov
zone serve unneed (and unsigned) akam.cdc.gov zone.  But they still
have DS RR for real akam.cdc.gov zone.

This is output of digs.

-- Orange

More information about the dns-operations mailing list