The signatures on the DNSKEY RRsets for two of the new generic TLDs have expired (other RRSIGs seem to be OK):
xn--3bst00m start 2014-03-25 20:19:00 end 2014-04-09 01:26:10 UTC xn--6qq986b3xl start 2014-03-25 12:19:01 end 2014-04-08 18:27:11 UTC http://dnssec-debugger.verisignlabs.com/ agrees with me. Is it significant that both TLDs were created on 2014-01-03? http://newgtlds.icann.org/en/program-status/delegated-strings ascribes them to different organisations, but they are hosted on the same nameservers (zdnscloud.com). -- Chris Thompson University of Cambridge Information Services, Email: [email protected] Roger Needham Building, 7 JJ Thomson Avenue, Phone: +44 1223 334715 Cambridge CB3 0RB, United Kingdom. _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
