<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
UltraDNS has identified an issue with NSEC signed zones with empty-non-terminals. We are working to correct this behavior and plan to have a fix deployed shortly after the new year.
<div class=""><br class="">
</div>
<div class="">- Steve De Jong<br class="">
<div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class=""><br class="">
</div>
</div>
</div>
<div>
<blockquote type="cite" class="">
<div class="">On Dec 28, 2019, at 9:59 AM, Viktor Dukhovni <<a href="mailto:ietf-dane@dukhovni.org" class="">ietf-dane@dukhovni.org</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">On Sat, Dec 28, 2019 at 04:47:27PM +0000, Matt Nordhoff wrote:<br class="">
<br class="">
<blockquote type="cite" class="">It looks like this is a more widespread Neustar issue. A domain using<br class="">
Namecheap's DNS service -- which now outsources the DNS servers to<br class="">
Neustar -- ran into the same issue.<br class="">
</blockquote>
<br class="">
...<br class="">
<br class="">
<blockquote type="cite" class="">Namecheap and PayPal could still be using the same software at another<br class="">
point in their stacks, but it seems more likely that the problem is on<br class="">
Neustar's end.<br class="">
</blockquote>
<br class="">
Again not clear whether the zone is signed by Neustar, or they're just serving<br class="">
a replica that was incorrectly signed elsewhere.<br class="">
<br class="">
-- <br class="">
Viktor.<br class="">
_______________________________________________<br class="">
dns-operations mailing list<br class="">
<a href="mailto:dns-operations@lists.dns-oarc.net" class="">dns-operations@lists.dns-oarc.net</a><br class="">
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.dns-2Doarc.net_mailman_listinfo_dns-2Doperations&d=DwICAg&c=MOptNlVtIETeDALC_lULrw&r=dDmVb52uNro62vP-w97PFD14RmhK5frGLUBkTeDmEC0&m=JqLYCsYWyaVEbTxyywQDZxQdMnygJz6fV6fho92kxcI&s=YljKKKxwzwI57brbcCagtIP0D22yWnEwh0t9VkOay_8&e=
<br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>