Verisign have a list of affected DNS by AS.
https://www.verisignlabs.com/KSKRollover/country.html?ksk=KSK-VERISIGN-TO-COUNTRY
Some conspicuous ones there... so your delays could well be related.
An excellent set of instructions there also:
https://www.verisign.com/en_US/company-information/veri
This might be 100% un-related but in the last hour I had most of work
report internet was very slow with pages taking a long time to load.
We are using Telstra DNS servers for wired and google for wireless with
same issues on both. Checking our 3 internet providers and have found no
issues on the
It is true that the first symptoms will be seen within 48hrs (TTL).
Based on "lab" condition experiments the increase of ./IN/DNSKEY queries would
be mostly evenly distributed within the period of the TTL (or half the TTL
period depending on some cache's to refresh at half the TTL) as caches a
It's a little early to call it. Let's give it a day or so before we see the
TTLs expire ;)
-Tom
On Thu, Oct 11, 2018 at 10:41 AM Terry Manderson wrote:
>
> Hi all,
>
> Wearing a bit of a DNS hat on this email.
>
> I'm sure you are all aware of this, especially those of you who are
> operating D
Hi all,
Wearing a bit of a DNS hat on this email.
I'm sure you are all aware of this, especially those of you who are operating
DNSSEC validating dns resolvers, the KSK was rolled at 1600 UTC (about 1.5
hours ago).
I'm watching from LA, and it looks to be a "Y2K" event.. i.e. it's just
happ
