Re: [dns-operations] Assistance Request: OpenDNS Not Resolving Certain .realtor™ Domains

[Borja Marcos]

> On 3 Dec 2025, at 11:01, Ondřej Surý <ondrej at sury.org> wrote:
> 
> Ok, look at the NSEC3 proof that the servers give:
> 
> vesdsjhfre0tap5h15gth2f925g1nj4c.realtor. 3600 IN NSEC3 1 1 0 - (
>                                VESDSJHFRE0TAP5H15GTH2F925G1NJ4C
>                                NS )
> 
> The NSEC3 record points back to itself instead of to the next name and it is being properly rejected as invalid.

I wonder why the major public resolvers are not stricter. Sometimes I get tired of customers claming that our
recursive DNS is wrong because Google resolves it. SIgh.





Borja.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 873 bytes
Desc: Message signed with OpenPGP
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20251203/3f5e6785/attachment-0001.sig>