> On Jul 11, 2023, at 8:24 PM, Gavin McCullagh <[email protected]> wrote: > > That is true of course, but the magnitude of this event was made much worse > by dnssec. The entire COM and NET zones being bogus (including the unsigned > delegations) is very different to the few that saw record changes in the > prior 1-2 days.
As explained in other messages this is not true due to the rolling expiry but on the other hand DNSSEC may have exposed the problem much sooner than otherwise, I once helped a TLD operator to find a single anycast instance that they assumed was off line for the few weeks but it was still serving an expired zone. Olafur
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
