On Sat, 22 Jun 2013, staticsafe wrote:
.biz seems to be failing at DNSSEC validation, none of my validating resolvers are able to resolve biz. or any domains underneath.
"None of the 5 DNSKEY records could be validated by any of the 2 DS records" I guess a botched KSK rollover or a DS record miscommunication..... It's something that a signer solution should really check for before allowing a zone to be pushed, even if that means some kind of internet connectivity to get those DS records. Paul _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
