On 02.07.2014 12:29, Mohamed Lrhazi wrote: > I am sure I messed up something, but cant figure out what! Some DNS > servers, notably Google's, return SERVFAIL, since a couple of days now.
DNSSEC validation fails for your domain. The DS record in .edu refers to a KSK with ID 3078 which doesn't match either of the two KSK DNSKEYs in gu.edu. More remarkably, Google Public DNS seems to have DNSSEC validation enabled by default now, not depending on the query flags anymore. HTH, Hauke. _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
