.ke - something wrong with DNSKEYs?

[Ahmed Landi]

Dear Stephane,

Thank you for this - the offending ns (NS2KE.DNS.BUSINESS) has been isolated. Apologies for the delay

..................... 

Landi, Ahmed 


----- Original Message -----
From: "Stephane Bortzmeyer" <bortzmeyer at nic.fr>
To: "Ondřej Surý" <ondrej at sury.org>
Cc: dns-operations at lists.dns-oarc.net, "KeNIC Tech" <tech at kenic.or.ke>, "KE NIC" <admin at kenic.or.ke>
Sent: Friday, 1 March, 2024 19:07:08
Subject: Re: .ke - something wrong with DNSKEYs?

On Fri, Mar 01, 2024 at 05:05:30PM +0100,
 Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote 
 a message of 11 lines which said:

> On Fri, Mar 01, 2024 at 04:27:03PM +0100,
>  Ondřej Surý <ondrej at sury.org> wrote 
>  a message of 33 lines which said:
> 
> > does anyone else see this?
> > 
> > https://dnsviz.net/d/han.ke/ZeHwpA/dnssec/
> 
> Zonemaster sees similar
> <https://zonemaster.fr/en/result/41fec1d862e7d78a>.

Also, like Zonemaster and DNSviz, RIPE Atlas probes show that, indeed,
ns2ke.dns.business does not always send DNSKEYs:

% blaeu-resolve --requested 100 --nameserver NS2KE.DNS.BUSINESS --nsid --ednssize 4096 --type DNSKEY ke
Nameserver NS2KE.DNS.BUSINESS
[] : 91 occurrences 
[TIMEOUT] : 1 occurrences 
[256 3 8 aweaadwi0wdlxihuia0n2oqlif9+xjju qyjxhglrjqr6m47xepvvls9aft+7tvet wo1alo 257 3 8 aweaazlaskgfz2dilbzrqbepwtpkp62g rjghjqas+7iogcsagazob8jajtrgpwrf mbmdcp] : 2 occurrences 
Test #68174319 done at 2024-03-01T16:04:22Z