[dns-operations] [outages at outages.org: [outages] DNSSEC issues .se]

[Stephane Bortzmeyer]

Indeed, DNSviz seems to confirm the problem:

https://dnsviz.net/d/sportbladet.se/Yf1XbQ/dnssec/

The signature of the NSEC record looks strange to me:

% dig @a.ns.se. +dnssec A sportbladet.se

; <<>> DiG 9.16.1-Ubuntu <<>> @a.ns.se. +dnssec A sportbladet.se
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60924
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 5
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
; COOKIE: 0048c3eb59d11c2b0100000061fd58dcdecd7e08e6619bd5 (good)
;; QUESTION SECTION:
;sportbladet.se.		IN A

;; AUTHORITY SECTION:
sportbladet.se.		86400 IN NS dns02.ports.se.
sportbladet.se.		86400 IN NS dns03.ports.se.
sportbladet.se.		86400 IN NS dns04.ports.net.
sportbladet.se.		86400 IN NS dns01.dipcon.com.
sportbladet.se.		7200 IN	NSEC sportbladet-tv.se. NS RRSIG NSEC
sportbladet.se.		7200 IN	RRSIG NSEC 8 2 7200 (
				20220217023427 20220204111055 30015 se.
				AAH/////////////////////////////////////////
				////////////////////////////////////////////
				////////////////////////////////////////////
				////////////////////////////////////////////
				////////////////////////////////////////////
				////////////////////////////////////////////
				////////ADAxMA0GCWCGSAFlAwQCAQUABCDDlM45/p82
				gs9EuWI0BODTVEgrkVM5ZrtG98oLVgefGQ== )

;; ADDITIONAL SECTION:
dns03.ports.se.		86400 IN AAAA 2a04:3540:1000:310:287e:f6ff:fe1d:4789
dns02.ports.se.		86400 IN AAAA 2001:19f0:5001:2a:5400:ff:fe38:1e6f
dns03.ports.se.		86400 IN A 94.237.33.102
dns02.ports.se.		86400 IN A 45.63.42.179

;; Query time: 39 msec
;; SERVER: 2a01:3f0:0:301::53#53(2a01:3f0:0:301::53)
;; WHEN: ven. févr. 04 17:48:28 CET 2022
;; MSG SIZE  rcvd: 595
-------------- next part --------------
An embedded message was scrubbed...
From: Jonathan S��lea via Outages <outages at outages.org>
Subject: [outages] DNSSEC issues .se
Date: Fri, 4 Feb 2022 16:25:57 +0000
Size: 69631
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20220204/e6510fe3/attachment.mht>