[dns-operations] Google (formerly also CF) public DNS sometimes forwards incomplete subset of NSEC RRs

Robert Evans evansr at google.com
Wed Aug 4 13:27:31 UTC 2021


On Wed, Jul 28, 2021 at 11:37 PM Viktor Dukhovni <ietf-dane at dukhovni.org>
wrote:

> One zone with [...] partly expired NSEC RRSIGs via a no longer published
> ZSK.
>

We identified and fixed a data handling issue which triggered this in a
small number of zones.

Thanks Viktor for finding and bringing this to our attention.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20210804/10f0ed28/attachment.html>


More information about the dns-operations mailing list