[dns-operations] .GL (Greenland) 2LD DS denial of existence problems

[Viktor Dukhovni]

The .GL TLD returns bogus NXDOMAIN responses to DS queries for:

    com.gl. IN DS ? ; NXDomain https://dnsviz.net/d/com.gl/ZJEMOQ/dnssec/
    gl. IN SOA a.nuuk.nic.gl. gl-admin at tele.gl. 2022119284 900 1800 6048000 3600
    gl. IN RRSIG SOA 8 1 900 20230705050000 20230618050000 39306 gl.  [...]
    s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM
    s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 20230705050000 20230618050000 39306 gl. [...]
    BBTTMJM743SRPQ6J4KQDIUC73E3C1HOA.gl. IN NSEC3 1 1 10 504d114b BSHTF866A32E02RJ617EUE8CCP45A6V4 NS DS RRSIG
    BBTTMJM743SRPQ6J4KQDIUC73E3C1HOA.gl. IN RRSIG NSEC3 8 2 3600 20230705050000 20230618050000 39306 gl. [...]
    6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG
    6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 20230705050000 20230618050000 39306 gl. [...]

    edu.gl. IN DS ? ; NXDomain https://dnsviz.net/d/edu.gl/ZJEKYw/dnssec/
    gl. IN SOA a.nuuk.nic.gl. gl-admin at tele.gl. 2022119284 900 1800 6048000 3600
    gl. IN RRSIG SOA 8 1 900 20230705050000 20230618050000 39306 gl. [...]
    s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM
    s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 20230705050000 20230618050000 39306 gl. [...]
    O3DN0L28MEKMTHMNP658AQ4UUG4CDHTP.gl. IN NSEC3 1 1 10 504d114b OE6EUSIJCPGO9R8RG0RO7Q9TPS7L9A46 NS DS RRSIG
    O3DN0L28MEKMTHMNP658AQ4UUG4CDHTP.gl. IN RRSIG NSEC3 8 2 3600 20230705050000 20230618050000 39306 gl. [...]
    6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG
    6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 20230705050000 20230618050000 39306 gl. [...]

    org.gl. IN DS ? ; NXDomain https://dnsviz.net/d/org.gl/ZJEMkg/dnssec/
    gl. IN SOA a.nuuk.nic.gl. gl-admin at tele.gl. 2022119284 900 1800 6048000 3600
    gl. IN RRSIG SOA 8 1 900 20230705050000 20230618050000 39306 gl. [...]
    s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM
    s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 20230705050000 20230618050000 39306 gl. [...]
    EB30Q0MC6UJD3MIGICRL31Q4SNSIT4T7.gl. IN NSEC3 1 1 10 504d114b EE4KJQ89ME2PR0AOHKV4G9OACUF3367V NS DS RRSIG
    EB30Q0MC6UJD3MIGICRL31Q4SNSIT4T7.gl. IN RRSIG NSEC3 8 2 3600 20230705050000 20230618050000 39306 gl. [...]
    6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG
    6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 20230705050000 20230618050000 39306 gl. [...]

All three 2LDs exist, are delegated, have SOA records and child zones.

-- 
    Viktor.