If anyone out there is from usa.gov or has some contacts closer to usa.gov, some of their servers are handing out expired RRSIGs for the DNSKEYs,
https://dnsviz.net/d/usa.gov/dnssec/ At least still happening as I am sending this at about 2040 UTC, March 25th. The RRSIGs expired roughly 24 hours ago. Some NS servers return good RRSIGs, other the expired. In a few cases the "same" server returns expired to queries to its IPv4 address, but queries to IPv6 are OK. Guess it's really not the same server (which really is fine, just interesting to note). _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
