<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Thank you Dr. Lisse.<br>
Here is what I got from Kenic <br>
<br>
"<br>
<div>Early today in the morning we noted unavailability of .ke
domains. Most .ke domains were not available and new domain
registered had propagation issues.</div>
<div><br>
</div>
<div>This was caused by DNSSec setup revoking DNSKEYS a month
earlier than the DNSKEY scheduled expiry date, making the DNSKEY
unavailable in the .ke zone.</div>
<div><br>
</div>
<div>We have since resolved the issue and domains should be
available now.</div>
<div><br>
</div>
<div>To ensure this does not happen in future we have disable
Auto-DNSSec maintenance and we we will be maintaining DNSSec
manually.</div>
<div><br>
</div>
<div>Incase you are still experiencing any issues kindly send us
an email.<br>
</div>
<div><br>
</div>
<div>email: <a href="mailto:support@kenic.or.ke">support@kenic.or.ke</a></div>
<div><br>
</div>
<div>
<p class=""><span class="">We sincerely apologise for any
inconveniences caused"<br>
</span></p>
<p class=""><span class="">Best regards<br>
Alice<br>
<br>
</span></p>
</div>
<br>
<br>
On 31/03/2015 15:12, Dr Eberhard Lisse wrote:<br>
</div>
<blockquote cite="mid:551A8F36.8000508@lisse.NA" type="cite">
<pre wrap="">Their web site, when reached under the IP
<a class="moz-txt-link-freetext" href="http://198.32.67.18/index.php?option=com_content&view=article&id=107&Itemid=530&catid=78">http://198.32.67.18/index.php?option=com_content&view=article&id=107&Itemid=530&catid=78</a>
shows some numbers differing from the whois...
greetings, el
On 2015-03-31 13:37, Anand Buddhdev wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Wouter Wijngaards just alerted me to validation failures for .KE
(Kenya). I tried to call KENIC, but their phone numbers are all
unreachable.
If anyone has local contacts in Kenya or nearby, please alert
them!
<a class="moz-txt-link-freetext" href="http://dnsviz.net/d/ke/VRp4ag/dnssec/">http://dnsviz.net/d/ke/VRp4ag/dnssec/</a>
Their current DS record points to a key that has the revoke bit
set, but it is no longer signing the DNSKEY rrset.
Regards,
Anand Buddhdev RIPE NCC
</pre>
</blockquote>
<pre wrap="">
</pre>
</blockquote>
<br>
</body>
</html>