Re: [dns-operations] .GL (Greenland) 2LD DS denial of existence problems
On Mon, Jun 19, 2023 at 10:23:13PM -0400, Viktor Dukhovni wrote a message of 66 lines which said: > The .GL TLD returns bogus NXDOMAIN responses to DS queries for: But it replies properly for NSEC3PARAM :-) % dig +dnssec @d.nic.gl NSEC3PARAM com.gl ; <<>> DiG 9.18.12-1-Debian <<>> +dnssec @d.nic.gl NSEC3PARAM com.gl ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55173 ;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ; COOKIE: 734ffb7abf3db0bf51ad1f92649173941779bd5c41101e6d (good) ;; QUESTION SECTION: ;com.gl.IN NSEC3PARAM ;; ANSWER SECTION: com.gl. 0 IN NSEC3PARAM 1 0 10 788F7E66 com.gl. 0 IN RRSIG NSEC3PARAM 8 2 0 2023070514 2023061814 36840 com.gl. GhwPL1HdLpQFd0TYzqsa79AgDyAcZMOKK63LVPZK0TjrcT8ffaKo4ZYU 6a0Pv0yifl07xPNMmxSb4EHodk9TYoOG4BAX624zTs8fhfkdjzvhh64T WSieZsXvEQ5Z8yizzutL3Tp3kST2nYDCXnILpNSEiS/OIh28J7iQgJf1 JP65lKuoiPtYNVCqf4UjiGbPn3/ar9WijMB91tdqjBbOZIRvsFxSXfb6 VrQ8Fz82a8BA3h1QqeaH1KvyOz5wRHX4p7Qh3eYti7E1Zcp98lLDmOnx ZSo55voqtxCZxm/sxLWMdPCEZbyZEzU1Co6953V/jFvFZeYkZNWxhf1/ mbIclQ== ;; Query time: 0 msec ;; SERVER: 2001:500:14:6049:ad::1#53(d.nic.gl) (UDP) ;; WHEN: Tue Jun 20 11:38:28 CEST 2023 ;; MSG SIZE rcvd: 378 ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
Re: [dns-operations] .GL (Greenland) 2LD DS denial of existence problems
Yes, that too. There’s a bit of a laundry-list. -Bill > On Jun 20, 2023, at 8:47 AM, Mark Andrews wrote: > > Isn’t it more not copying the NS records into the GL zone so that the signer > will generate the correct NSEC3 chain? > You could get away with missing this step pre-DNSSEC if parent and child > where served by the same set of servers but > not now that DNSSEC exists and especially if the parent is signed. > > Mark > >> On 20 Jun 2023, at 16:13, Bill Woodcock wrote: >> >> Yes, the second-levels have been broken since the middle of last October. >> CentralNIC unexpectedly created new delegation points for the second-level >> domains, but has not yet copied the DS records down from the parent, nor >> created new ones of their own. We remind them of the issue periodically, >> but no response thus far. >> >> -Bill >> >> >> On Jun 20, 2023, at 4:23 AM, Viktor Dukhovni wrote: >>> >>> The .GL TLD returns bogus NXDOMAIN responses to DS queries for: >>> >>> com.gl. IN DS ? ; NXDomain https://dnsviz.net/d/com.gl/ZJEMOQ/dnssec/ >>> gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 >>> 3600 >>> gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] >>> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b >>> SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM >>> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 >>> 2023070505 2023061805 39306 gl. [...] >>> BBTTMJM743SRPQ6J4KQDIUC73E3C1HOA.gl. IN NSEC3 1 1 10 504d114b >>> BSHTF866A32E02RJ617EUE8CCP45A6V4 NS DS RRSIG >>> BBTTMJM743SRPQ6J4KQDIUC73E3C1HOA.gl. IN RRSIG NSEC3 8 2 3600 >>> 2023070505 2023061805 39306 gl. [...] >>> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b >>> 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG >>> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 >>> 2023070505 2023061805 39306 gl. [...] >>> >>> edu.gl. IN DS ? ; NXDomain https://dnsviz.net/d/edu.gl/ZJEKYw/dnssec/ >>> gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 >>> 3600 >>> gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] >>> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b >>> SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM >>> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 >>> 2023070505 2023061805 39306 gl. [...] >>> O3DN0L28MEKMTHMNP658AQ4UUG4CDHTP.gl. IN NSEC3 1 1 10 504d114b >>> OE6EUSIJCPGO9R8RG0RO7Q9TPS7L9A46 NS DS RRSIG >>> O3DN0L28MEKMTHMNP658AQ4UUG4CDHTP.gl. IN RRSIG NSEC3 8 2 3600 >>> 2023070505 2023061805 39306 gl. [...] >>> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b >>> 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG >>> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 >>> 2023070505 2023061805 39306 gl. [...] >>> >>> org.gl. IN DS ? ; NXDomain https://dnsviz.net/d/org.gl/ZJEMkg/dnssec/ >>> gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 >>> 3600 >>> gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] >>> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b >>> SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM >>> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 >>> 2023070505 2023061805 39306 gl. [...] >>> EB30Q0MC6UJD3MIGICRL31Q4SNSIT4T7.gl. IN NSEC3 1 1 10 504d114b >>> EE4KJQ89ME2PR0AOHKV4G9OACUF3367V NS DS RRSIG >>> EB30Q0MC6UJD3MIGICRL31Q4SNSIT4T7.gl. IN RRSIG NSEC3 8 2 3600 >>> 2023070505 2023061805 39306 gl. [...] >>> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b >>> 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG >>> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 >>> 2023070505 2023061805 39306 gl. [...] >>> >>> All three 2LDs exist, are delegated, have SOA records and child zones. >>> >>> -- >>> Viktor. >>> ___ >>> dns-operations mailing list >>> dns-operations@lists.dns-oarc.net >>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations >> >> >> ___ >> dns-operations mailing list >> dns-operations@lists.dns-oarc.net >> https://lists.dns-oarc.net/mailman/listinfo/dns-operations > > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org > ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
Re: [dns-operations] .GL (Greenland) 2LD DS denial of existence problems
Isn’t it more not copying the NS records into the GL zone so that the signer will generate the correct NSEC3 chain? You could get away with missing this step pre-DNSSEC if parent and child where served by the same set of servers but not now that DNSSEC exists and especially if the parent is signed. Mark > On 20 Jun 2023, at 16:13, Bill Woodcock wrote: > > Yes, the second-levels have been broken since the middle of last October. > CentralNIC unexpectedly created new delegation points for the second-level > domains, but has not yet copied the DS records down from the parent, nor > created new ones of their own. We remind them of the issue periodically, but > no response thus far. > >-Bill > > > >> On Jun 20, 2023, at 4:23 AM, Viktor Dukhovni wrote: >> >> The .GL TLD returns bogus NXDOMAIN responses to DS queries for: >> >> com.gl. IN DS ? ; NXDomain https://dnsviz.net/d/com.gl/ZJEMOQ/dnssec/ >> gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 >> 3600 >> gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] >> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b >> SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM >> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 >> 2023070505 2023061805 39306 gl. [...] >> BBTTMJM743SRPQ6J4KQDIUC73E3C1HOA.gl. IN NSEC3 1 1 10 504d114b >> BSHTF866A32E02RJ617EUE8CCP45A6V4 NS DS RRSIG >> BBTTMJM743SRPQ6J4KQDIUC73E3C1HOA.gl. IN RRSIG NSEC3 8 2 3600 >> 2023070505 2023061805 39306 gl. [...] >> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b >> 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG >> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 >> 2023070505 2023061805 39306 gl. [...] >> >> edu.gl. IN DS ? ; NXDomain https://dnsviz.net/d/edu.gl/ZJEKYw/dnssec/ >> gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 >> 3600 >> gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] >> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b >> SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM >> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 >> 2023070505 2023061805 39306 gl. [...] >> O3DN0L28MEKMTHMNP658AQ4UUG4CDHTP.gl. IN NSEC3 1 1 10 504d114b >> OE6EUSIJCPGO9R8RG0RO7Q9TPS7L9A46 NS DS RRSIG >> O3DN0L28MEKMTHMNP658AQ4UUG4CDHTP.gl. IN RRSIG NSEC3 8 2 3600 >> 2023070505 2023061805 39306 gl. [...] >> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b >> 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG >> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 >> 2023070505 2023061805 39306 gl. [...] >> >> org.gl. IN DS ? ; NXDomain https://dnsviz.net/d/org.gl/ZJEMkg/dnssec/ >> gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 >> 3600 >> gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] >> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b >> SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM >> s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 >> 2023070505 2023061805 39306 gl. [...] >> EB30Q0MC6UJD3MIGICRL31Q4SNSIT4T7.gl. IN NSEC3 1 1 10 504d114b >> EE4KJQ89ME2PR0AOHKV4G9OACUF3367V NS DS RRSIG >> EB30Q0MC6UJD3MIGICRL31Q4SNSIT4T7.gl. IN RRSIG NSEC3 8 2 3600 >> 2023070505 2023061805 39306 gl. [...] >> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b >> 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG >> 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 >> 2023070505 2023061805 39306 gl. [...] >> >> All three 2LDs exist, are delegated, have SOA records and child zones. >> >> -- >> Viktor. >> ___ >> dns-operations mailing list >> dns-operations@lists.dns-oarc.net >> https://lists.dns-oarc.net/mailman/listinfo/dns-operations > > > ___ > dns-operations mailing list > dns-operations@lists.dns-oarc.net > https://lists.dns-oarc.net/mailman/listinfo/dns-operations -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
Re: [dns-operations] .GL (Greenland) 2LD DS denial of existence problems
Yes, the second-levels have been broken since the middle of last October. CentralNIC unexpectedly created new delegation points for the second-level domains, but has not yet copied the DS records down from the parent, nor created new ones of their own. We remind them of the issue periodically, but no response thus far. -Bill > On Jun 20, 2023, at 4:23 AM, Viktor Dukhovni wrote: > > The .GL TLD returns bogus NXDOMAIN responses to DS queries for: > >com.gl. IN DS ? ; NXDomain https://dnsviz.net/d/com.gl/ZJEMOQ/dnssec/ >gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 > 3600 >gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] >s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b > SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM >s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 > 2023070505 2023061805 39306 gl. [...] >BBTTMJM743SRPQ6J4KQDIUC73E3C1HOA.gl. IN NSEC3 1 1 10 504d114b > BSHTF866A32E02RJ617EUE8CCP45A6V4 NS DS RRSIG >BBTTMJM743SRPQ6J4KQDIUC73E3C1HOA.gl. IN RRSIG NSEC3 8 2 3600 > 2023070505 2023061805 39306 gl. [...] >6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b > 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG >6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 > 2023070505 2023061805 39306 gl. [...] > >edu.gl. IN DS ? ; NXDomain https://dnsviz.net/d/edu.gl/ZJEKYw/dnssec/ >gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 > 3600 >gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] >s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b > SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM >s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 > 2023070505 2023061805 39306 gl. [...] >O3DN0L28MEKMTHMNP658AQ4UUG4CDHTP.gl. IN NSEC3 1 1 10 504d114b > OE6EUSIJCPGO9R8RG0RO7Q9TPS7L9A46 NS DS RRSIG >O3DN0L28MEKMTHMNP658AQ4UUG4CDHTP.gl. IN RRSIG NSEC3 8 2 3600 > 2023070505 2023061805 39306 gl. [...] >6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b > 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG >6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 > 2023070505 2023061805 39306 gl. [...] > >org.gl. IN DS ? ; NXDomain https://dnsviz.net/d/org.gl/ZJEMkg/dnssec/ >gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 > 3600 >gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] >s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b > SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM >s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 > 2023070505 2023061805 39306 gl. [...] >EB30Q0MC6UJD3MIGICRL31Q4SNSIT4T7.gl. IN NSEC3 1 1 10 504d114b > EE4KJQ89ME2PR0AOHKV4G9OACUF3367V NS DS RRSIG >EB30Q0MC6UJD3MIGICRL31Q4SNSIT4T7.gl. IN RRSIG NSEC3 8 2 3600 > 2023070505 2023061805 39306 gl. [...] >6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b > 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG >6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 > 2023070505 2023061805 39306 gl. [...] > > All three 2LDs exist, are delegated, have SOA records and child zones. > > -- >Viktor. > ___ > dns-operations mailing list > dns-operations@lists.dns-oarc.net > https://lists.dns-oarc.net/mailman/listinfo/dns-operations ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
[dns-operations] .GL (Greenland) 2LD DS denial of existence problems
The .GL TLD returns bogus NXDOMAIN responses to DS queries for: com.gl. IN DS ? ; NXDomain https://dnsviz.net/d/com.gl/ZJEMOQ/dnssec/ gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 3600 gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 2023070505 2023061805 39306 gl. [...] BBTTMJM743SRPQ6J4KQDIUC73E3C1HOA.gl. IN NSEC3 1 1 10 504d114b BSHTF866A32E02RJ617EUE8CCP45A6V4 NS DS RRSIG BBTTMJM743SRPQ6J4KQDIUC73E3C1HOA.gl. IN RRSIG NSEC3 8 2 3600 2023070505 2023061805 39306 gl. [...] 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 2023070505 2023061805 39306 gl. [...] edu.gl. IN DS ? ; NXDomain https://dnsviz.net/d/edu.gl/ZJEKYw/dnssec/ gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 3600 gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 2023070505 2023061805 39306 gl. [...] O3DN0L28MEKMTHMNP658AQ4UUG4CDHTP.gl. IN NSEC3 1 1 10 504d114b OE6EUSIJCPGO9R8RG0RO7Q9TPS7L9A46 NS DS RRSIG O3DN0L28MEKMTHMNP658AQ4UUG4CDHTP.gl. IN RRSIG NSEC3 8 2 3600 2023070505 2023061805 39306 gl. [...] 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 2023070505 2023061805 39306 gl. [...] org.gl. IN DS ? ; NXDomain https://dnsviz.net/d/org.gl/ZJEMkg/dnssec/ gl. IN SOA a.nuuk.nic.gl. gl-ad...@tele.gl. 2022119284 900 1800 6048000 3600 gl. IN RRSIG SOA 8 1 900 2023070505 2023061805 39306 gl. [...] s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN NSEC3 1 1 10 504d114b SAGKR73F41OMFFI8TDE1CGHOQM502SIH NS SOA RRSIG DNSKEY NSEC3PARAM s2uojg57gtbj0m12ecau9csfd38ejndn.gl. IN RRSIG NSEC3 8 2 3600 2023070505 2023061805 39306 gl. [...] EB30Q0MC6UJD3MIGICRL31Q4SNSIT4T7.gl. IN NSEC3 1 1 10 504d114b EE4KJQ89ME2PR0AOHKV4G9OACUF3367V NS DS RRSIG EB30Q0MC6UJD3MIGICRL31Q4SNSIT4T7.gl. IN RRSIG NSEC3 8 2 3600 2023070505 2023061805 39306 gl. [...] 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN NSEC3 1 1 10 504d114b 742MB65DHD2D8BG0846S1RKRER2E8CUB NS DS RRSIG 6LJARAG1OKGTS55S0KMDAS442VDOTMTH.gl. IN RRSIG NSEC3 8 2 3600 2023070505 2023061805 39306 gl. [...] All three 2LDs exist, are delegated, have SOA records and child zones. -- Viktor. ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
