[dns-operations] anchors.atlas.ripe.net/ripe.net - DNSSEC bogus due expiration

Vladimír Čunát vladimir.cunat+ietf at nic.cz
Fri Nov 3 10:09:02 UTC 2023


On 01/11/2023 17.18, Viktor Dukhovni wrote:
> Should authoritative resolvers have knobs to perform internal checks on
> the signed zones they serve and at least syslog loud warnings?

My understanding is that in this case the signer was producing loud 
syslog warnings immediately when the issue happened (i.e. long before 
validation could fail).

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20231103/c2048277/attachment-0001.html>


More information about the dns-operations mailing list