Re: expired KSK, other domains failed to resolve?

On Thu, Aug 6, 2015 at 4:16 AM, Lawrence K. Chen, P.Eng. lkc...@ksu.edu wrote: So, in running some testsI found that dig +trace kstatesports.com would get to ns-1.ksu.edu show couple NSEC3 records and stop. $ dig +short kstatesports.com ns ns-2.ksu.edu. ns-3.ksu.edu. ns-1.ksu.edu.

expired KSK, other domains failed to resolve?

I wish I had the foresight to same the dig traces But, on Tuesday we had a strange DNS outage. I have 3 outside facing authoritative-only nameservers named ns-1.ksu.edu, ns-2.ksu.edu, ns-3.ksu.edu, which are all slaves off our hidden master server. that in addition to being the