<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p>Imperva/Incapsula which hosts a web application firewall (WAF)
with many customers having a CNAME configured towards a record in
their domain, incapdns.net. Incapsula had very recently DNSSEC
configured on this zone; but last night the RRSIG on the DNSKEY
record has expired; leaving every website behind incapdns.net
unreachable for users of a validating DNS resolver. As a quick
solution, Incapsula has removed the DS record from the parent
zone, .net. But, this record is still in many DNS caches (TTL=1
day).<br>
Therefore, the question if it is possible for validating resolver
maintainers to clear the cache of this DS record for the domain
incapdns.net.<br>
Thanks<br>
</p>
<div class="moz-signature">-- <br>
<font style="font-size: 9pt" face="Arial" color="#000000"><b>Sven
Van Dyck</b><br>
<font style="font-size: 8pt" face="Arial" color="#919191"><b>System
Engineer</b></font><br>
<font style="font-size: 8pt" face="Arial" color="#000000">+32 16
28 49 74</font><br>
<a href="http://www.dnsbelgium.be/"><font style="font-size: 8pt" face="Arial"><b>www.dnsbelgium.be</b></font></a><br>
<br>
<br>
</font></div>
</body>
</html>