<div><div dir="auto">Hi,</div></div><div dir="auto"><br></div><div dir="auto">Thanks for reporting this issue. we are investigating. </div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jan 30, 2020 at 21:34 T.Suzuki <<a href="mailto:tss@reflection.co.jp">tss@reflection.co.jp</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Why don't many of your 1.1.1.1 instances validate DNSSEC signatures?<br>
I noticed at 29 Jan 2020 21:05:31 -0000.<br>
<br>
ex.<br>
--- No AD Flag ---<br>
<br>
~% drill -D <a href="http://www.ietf.org" rel="noreferrer" target="_blank">www.ietf.org</a> @<a href="http://1.1.1.1" rel="noreferrer" target="_blank">1.1.1.1</a><br>
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 37059<br>
;; flags: qr rd ra ; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0 <br>
;; QUESTION SECTION:<br>
;; <a href="http://www.ietf.org" rel="noreferrer" target="_blank">www.ietf.org</a>. IN A<br>
<br>
;; ANSWER SECTION:<br>
<a href="http://www.ietf.org" rel="noreferrer" target="_blank">www.ietf.org</a>. 1725 IN CNAME <a href="http://www.ietf.org.cdn.cloudflare.net" rel="noreferrer" target="_blank">www.ietf.org.cdn.cloudflare.net</a>.<br>
<a href="http://www.ietf.org" rel="noreferrer" target="_blank">www.ietf.org</a>. 1725 IN RRSIG CNAME 5 3 1800 20210127000323 20200127230611 40452 <a href="http://ietf.org" rel="noreferrer" target="_blank">ietf.org</a>. fX/FCVGya8pIk/2cMDWu3+iNKyWd0GLK4g6wtwp8v7rjp+nynpRm1jOanP20p36Dod4qj0IdoMGu3PN2756QZW7LzQ6nS+x7Re37Q52BP89ADXZ5J5tLlcaRl0MEyoj6/Cyv6cW+GH8sK0PwYmE11mVzezI3ZrADWvTCmgNxEpxHxoF0jlpJ0+JVt9gP2bbHWg0uF2yspTwspaoCSRcaO6KFKnkkQXI2PFhgk0w/Od4NXe86V64U1WtMGcqNyGOe0zcq4HPmiiW+lvZab6QuZJ8kq/A5HrDw66MzuRK5S2PJFjoF7lna9OIru9JXT+FcHmozUpI9lwLJIwI5IRt11g==<br>
<a href="http://www.ietf.org.cdn.cloudflare.net" rel="noreferrer" target="_blank">www.ietf.org.cdn.cloudflare.net</a>. 225 IN A 104.20.0.85<br>
<a href="http://www.ietf.org.cdn.cloudflare.net" rel="noreferrer" target="_blank">www.ietf.org.cdn.cloudflare.net</a>. 225 IN RRSIG A 13 6 300 20200201051316 20200130031316 34505 <a href="http://cloudflare.net" rel="noreferrer" target="_blank">cloudflare.net</a>. 5ENTxqytYAMLW2cDtBiWLaEYDm9xMRplDZuoj/U084rAZoyjxwIrn3F+B2KfGldleYB5gbyvUPbPuv41lsoOUQ==<br>
<a href="http://www.ietf.org.cdn.cloudflare.net" rel="noreferrer" target="_blank">www.ietf.org.cdn.cloudflare.net</a>. 225 IN A 104.20.1.85<br>
<br>
;; AUTHORITY SECTION:<br>
<br>
;; ADDITIONAL SECTION:<br>
<br>
;; Query time: 196 msec<br>
;; EDNS: version 0; flags: do ; udp: 1452<br>
;; SERVER: 1.1.1.1<br>
;; WHEN: Fri Jan 31 13:14:32 2020<br>
;; MSG SIZE rcvd: 536<br>
<br>
--- With AD Flag ---<br>
<br>
~% drill -D <a href="http://www.ietf.org" rel="noreferrer" target="_blank">www.ietf.org</a> @<a href="http://1.1.1.1" rel="noreferrer" target="_blank">1.1.1.1</a><br>
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 23813<br>
;; flags: qr rd ra ad ; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0 <br>
;; QUESTION SECTION:<br>
;; <a href="http://www.ietf.org" rel="noreferrer" target="_blank">www.ietf.org</a>. IN A<br>
<br>
;; ANSWER SECTION:<br>
<a href="http://www.ietf.org" rel="noreferrer" target="_blank">www.ietf.org</a>. 1578 IN CNAME <a href="http://www.ietf.org.cdn.cloudflare.net" rel="noreferrer" target="_blank">www.ietf.org.cdn.cloudflare.net</a>.<br>
<a href="http://www.ietf.org" rel="noreferrer" target="_blank">www.ietf.org</a>. 1578 IN RRSIG CNAME 5 3 1800 20210127000323 20200127230611 40452 <a href="http://ietf.org" rel="noreferrer" target="_blank">ietf.org</a>. fX/FCVGya8pIk/2cMDWu3+iNKyWd0GLK4g6wtwp8v7rjp+nynpRm1jOanP20p36Dod4qj0IdoMGu3PN2756QZW7LzQ6nS+x7Re37Q52BP89ADXZ5J5tLlcaRl0MEyoj6/Cyv6cW+GH8sK0PwYmE11mVzezI3ZrADWvTCmgNxEpxHxoF0jlpJ0+JVt9gP2bbHWg0uF2yspTwspaoCSRcaO6KFKnkkQXI2PFhgk0w/Od4NXe86V64U1WtMGcqNyGOe0zcq4HPmiiW+lvZab6QuZJ8kq/A5HrDw66MzuRK5S2PJFjoF7lna9OIru9JXT+FcHmozUpI9lwLJIwI5IRt11g==<br>
<a href="http://www.ietf.org.cdn.cloudflare.net" rel="noreferrer" target="_blank">www.ietf.org.cdn.cloudflare.net</a>. 300 IN A 104.20.0.85<br>
<a href="http://www.ietf.org.cdn.cloudflare.net" rel="noreferrer" target="_blank">www.ietf.org.cdn.cloudflare.net</a>. 300 IN A 104.20.1.85<br>
<a href="http://www.ietf.org.cdn.cloudflare.net" rel="noreferrer" target="_blank">www.ietf.org.cdn.cloudflare.net</a>. 300 IN RRSIG A 13 6 300 20200201051436 20200130031436 34505 <a href="http://cloudflare.net" rel="noreferrer" target="_blank">cloudflare.net</a>. cgg3sYERXPXlx4u1y5XKEFzaGHbJO/tiEqzpkC94JLyrlqAz4mG4ika+OeMaIIrnG80NDxuzA1XBXDyy9smldA==<br>
<br>
;; AUTHORITY SECTION:<br>
<br>
;; ADDITIONAL SECTION:<br>
<br>
;; Query time: 39 msec<br>
;; EDNS: version 0; flags: do ; udp: 1452<br>
;; SERVER: 1.1.1.1<br>
;; WHEN: Fri Jan 31 13:14:36 2020<br>
;; MSG SIZE rcvd: 555<br>
<br>
-- <br>
------------------------------------------------------------------------------<br>
T.Suzuki <br>
_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br>
</blockquote></div></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>With Regards,</div><div><br></div>Vicky Shrestha</div></div>