On Tue, May 20, 2014 at 4:22 PM, Stephane Bortzmeyer <[email protected]>wrote:

> The problem is indeed in
> 172.in-addr.arpa (botched rollover, it seems, old KSK 30729 removed
> from the zone while the DS was - is - still in many caches).
>

Not only in caches, but while it was still being served from the
in-addr.arpa parent zone.

http://dnsviz.net/d/172.in-addr.arpa/U3tPeg/dnssec/

Casey
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

Reply via email to