On Sep 6 2013, I wrote:
On Aug 22 2013, I wrote:
The TLD "xn--l1acc" (an IDN for Mongolia) which was only added to the root
zone last weekend, signed and with a DS right from the outset, seems to
have got into trouble already.
It looks as if a KSK rollover from a key with id 29566 to one with id 38599
has been applied without changing the DS RRset in the root zone.
The mismatched KSK and DS have not changed since then. For a TLD, this
seems to be taking an inordinately long time to sort out.
Well, if anyone agreed that was "inordinately long", I wonder what they
think of the fact that the same KSK/DS mismatch is still there, three
months on.
Apart from that, all the RRSIGs in the zone expired on 2013-09-20.
One has to feel that the administrators of this TLD should never have
attempted to make it signed, if this is the best they can do.
--
Chris Thompson University of Cambridge Computing Service,
Email: [email protected] Roger Needham Building, 7 JJ Thomson Avenue,
Phone: +44 1223 334715 Cambridge CB3 0RB, United Kingdom.
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
