Hi, Thanks for reporting this issue. we are investigating.
On Thu, Jan 30, 2020 at 21:34 T.Suzuki <[email protected]> wrote: > Why don't many of your 1.1.1.1 instances validate DNSSEC signatures? > I noticed at 29 Jan 2020 21:05:31 -0000. > > ex. > --- No AD Flag --- > > ~% drill -D www.ietf.org @1.1.1.1 > ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 37059 > ;; flags: qr rd ra ; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0 > ;; QUESTION SECTION: > ;; www.ietf.org. IN A > > ;; ANSWER SECTION: > www.ietf.org. 1725 IN CNAME www.ietf.org.cdn.cloudflare.net. > www.ietf.org. 1725 IN RRSIG CNAME 5 3 1800 20210127000323 > 20200127230611 40452 ietf.org. > fX/FCVGya8pIk/2cMDWu3+iNKyWd0GLK4g6wtwp8v7rjp+nynpRm1jOanP20p36Dod4qj0IdoMGu3PN2756QZW7LzQ6nS+x7Re37Q52BP89ADXZ5J5tLlcaRl0MEyoj6/Cyv6cW+GH8sK0PwYmE11mVzezI3ZrADWvTCmgNxEpxHxoF0jlpJ0+JVt9gP2bbHWg0uF2yspTwspaoCSRcaO6KFKnkkQXI2PFhgk0w/Od4NXe86V64U1WtMGcqNyGOe0zcq4HPmiiW+lvZab6QuZJ8kq/A5HrDw66MzuRK5S2PJFjoF7lna9OIru9JXT+FcHmozUpI9lwLJIwI5IRt11g== > www.ietf.org.cdn.cloudflare.net. 225 IN A > 104.20.0.85 > www.ietf.org.cdn.cloudflare.net. 225 IN RRSIG A 13 6 > 300 20200201051316 20200130031316 34505 cloudflare.net. > 5ENTxqytYAMLW2cDtBiWLaEYDm9xMRplDZuoj/U084rAZoyjxwIrn3F+B2KfGldleYB5gbyvUPbPuv41lsoOUQ== > www.ietf.org.cdn.cloudflare.net. 225 IN A > 104.20.1.85 > > ;; AUTHORITY SECTION: > > ;; ADDITIONAL SECTION: > > ;; Query time: 196 msec > ;; EDNS: version 0; flags: do ; udp: 1452 > ;; SERVER: 1.1.1.1 > ;; WHEN: Fri Jan 31 13:14:32 2020 > ;; MSG SIZE rcvd: 536 > > --- With AD Flag --- > > ~% drill -D www.ietf.org @1.1.1.1 > ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 23813 > ;; flags: qr rd ra ad ; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0 > ;; QUESTION SECTION: > ;; www.ietf.org. IN A > > ;; ANSWER SECTION: > www.ietf.org. 1578 IN CNAME www.ietf.org.cdn.cloudflare.net. > www.ietf.org. 1578 IN RRSIG CNAME 5 3 1800 20210127000323 > 20200127230611 40452 ietf.org. > fX/FCVGya8pIk/2cMDWu3+iNKyWd0GLK4g6wtwp8v7rjp+nynpRm1jOanP20p36Dod4qj0IdoMGu3PN2756QZW7LzQ6nS+x7Re37Q52BP89ADXZ5J5tLlcaRl0MEyoj6/Cyv6cW+GH8sK0PwYmE11mVzezI3ZrADWvTCmgNxEpxHxoF0jlpJ0+JVt9gP2bbHWg0uF2yspTwspaoCSRcaO6KFKnkkQXI2PFhgk0w/Od4NXe86V64U1WtMGcqNyGOe0zcq4HPmiiW+lvZab6QuZJ8kq/A5HrDw66MzuRK5S2PJFjoF7lna9OIru9JXT+FcHmozUpI9lwLJIwI5IRt11g== > www.ietf.org.cdn.cloudflare.net. 300 IN A > 104.20.0.85 > www.ietf.org.cdn.cloudflare.net. 300 IN A > 104.20.1.85 > www.ietf.org.cdn.cloudflare.net. 300 IN RRSIG A 13 6 > 300 20200201051436 20200130031436 34505 cloudflare.net. > cgg3sYERXPXlx4u1y5XKEFzaGHbJO/tiEqzpkC94JLyrlqAz4mG4ika+OeMaIIrnG80NDxuzA1XBXDyy9smldA== > > ;; AUTHORITY SECTION: > > ;; ADDITIONAL SECTION: > > ;; Query time: 39 msec > ;; EDNS: version 0; flags: do ; udp: 1452 > ;; SERVER: 1.1.1.1 > ;; WHEN: Fri Jan 31 13:14:36 2020 > ;; MSG SIZE rcvd: 555 > > -- > > ------------------------------------------------------------------------------ > T.Suzuki > _______________________________________________ > dns-operations mailing list > [email protected] > https://lists.dns-oarc.net/mailman/listinfo/dns-operations > -- With Regards, Vicky Shrestha
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
