>On 24 Oct 2013, at 14:12, Chris Thompson ><[email protected]<mailto:[email protected]>> wrote:
>At 13:01 23-10-2013, Edward Lewis wrote: >My sensors show 4 new gTLDs in the last hour or so...IDN, non-ccTLD...added >between 1800 and 1900 UTC. >Not mentioned yet is that all four appeared already signed and with >DS records in the root zone. I *think* this is a condition of delegation. >But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a bit >broken, in that NXDOMAIN responses don't validate properly. Neither >dnssec-debugger.verisignlabs.com nor dnsviz.net are able to analyse >validations problems for NXDOMAIN responses, so I am not quite sure >why yet, but e.g. >dig +dnssec www.xn--80asehdb<http://www.xn--80asehdb>. >dig +dnssec www.xn--80aswg<http://www.xn--80aswg>. >give SERVFAILs which can be avoided by adding the +cd option. I'm surprised this wasn't picked up as part of pre-delegation testing. Brett
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
