On 12/8/21 15:27, Laura Smith via NANOG wrote:
Bit of a long stretch given the US audience, but I'm seeing lots of things like this at the moment: info: validation failure <european-union.europa.eu. AAAA IN>: key for validation european-union.europa.eu. is marked as invalid because of a previous validation failure <european-union.europa.eu. AAAA IN>: DS got unsigned CNAME answer from 2600:9000:5301:a200::1 and 34.255.155.194 for DS european-union.europa.eu. while building chain of trust info: validation failure <european-union.europa.eu. AAAA IN>: DS got unsigned CNAME answer from 2600:9000:5302:9a00::1 and 34.255.155.194 for DS european-union.europa.eu. while building chain of trust validation failure <europa.eu. A IN>: signatures from unknown keys from 147.67.12.3 info: validation failure <europa.eu. AAAA IN>: signatures from unknown keys from 147.67.12.3
Both of these are showing a number of issues: https://dnssec-analyzer.verisignlabs.com/european-union.europa.eu https://dnsviz.net/d/european-union.europa.eu/dnssec/ Mark.
