[dns-operations] DNS .com/.net resolution problems in the Asia/Pacific region

[Olafur Gudmundsson]

> On Jul 11, 2023, at 8:24 PM, Gavin McCullagh <gmccullagh at gmail.com> wrote:
> 
> That is true of course, but the magnitude of this event was made much worse by dnssec.  The entire COM and NET zones being bogus (including the unsigned delegations) is very different to the few that saw record changes in the prior 1-2 days. 


As explained in other messages this is not true due to the rolling expiry 
but on the other hand DNSSEC may have exposed the problem much sooner than otherwise, I once helped a TLD operator to find a single anycast instance that they assumed was off line for the few weeks but it was still serving an expired zone. 

   Olafur

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20230712/8c6a2f40/attachment.html>