Anyone with contacts at Paypal and/or Ultradns?

Tom Ivar Helbekkmo tih at hamartun.priv.no
Tue Jan 28 07:48:51 UTC 2020


I wrote:

> The problems are visible using dnsviz:

...which showed that Neustar's "UltraDNS" name servers were mishandling
ENTs, causing trouble for resolvers that use qname minimization and/or
do careful DNSSEC validation.  Well, no more:

> https://dnsviz.net/d/slc.paypal.com/dnssec/
> https://dnsviz.net/d/_domainkey.paypal.com/dnssec/

The good folks at Neustar took this problem seriously.  They followed up
my problem report diligently, and have just rolled out a new version of
their software, with the bug fixed.

Well done, Neustar!  :)

-tih
-- 
Most people who graduate with CS degrees don't understand the significance
of Lisp.  Lisp is the most important idea in computer science.  --Alan Kay



More information about the dns-operations mailing list