Re: [dns-operations] Problems with signatures in .SE

2022-02-04 Thread Ulrich Wisser via dns-operations
--- Begin Message --- We have identified and solved the problem. At 22.45 (UTC+1) a new zone file for .se has been distributed. There will be no further updates until tomorrow morning (Stockholm time UTC+1). > On 4 Feb 2022, at 20:24, Ulrich Wisser via dns-operations > wrote: > > >

Re: [dns-operations] Problems with signatures in .SE

2022-02-04 Thread Viktor Dukhovni
On Fri, Feb 04, 2022 at 08:24:31PM +0100, Ulrich Wisser wrote: > We are experiencing a technical difficulty that is affecting around > 8000 .se-domains. Services like e-mail and websites connected to these > domains can’t be used or reached at the moment. In total there are > 1,49 million

[dns-operations] Problems with signatures in .SE

2022-02-04 Thread Ulrich Wisser via dns-operations
--- Begin Message --- We are experiencing a technical difficulty that is affecting around 8000 .se-domains. Services like e-mail and websites connected to these domains can’t be used or reached at the moment. In total there are 1,49 million .se-domains, and out of those about 8000 are affected.

Re: [dns-operations] [outa...@outages.org: [outages] DNSSEC issues .se]

2022-02-04 Thread Viktor Dukhovni
On Fri, Feb 04, 2022 at 05:48:41PM +0100, Stephane Bortzmeyer wrote: > From: Jonathan Sélea via Outages > To: "outa...@outages.org" > Subject: [outages] DNSSEC issues .se > > Apparently, if a unsigned domain is followed by a signed domain in the > .se zone - the domain wont resolve due to NSEC

Re: [dns-operations] [outa...@outages.org: [outages] DNSSEC issues .se]

2022-02-04 Thread Viktor Dukhovni
On Fri, Feb 04, 2022 at 05:48:41PM +0100, Stephane Bortzmeyer wrote: > Indeed, DNSviz seems to confirm the problem: > > https://dnsviz.net/d/sportbladet.se/Yf1XbQ/dnssec/ > > The signature of the NSEC record looks strange to me: > > sportbladet.se. 7200 IN RRSIG NSEC 8 2 7200 ( >

[dns-operations] [outa...@outages.org: [outages] DNSSEC issues .se]

2022-02-04 Thread Stephane Bortzmeyer
Indeed, DNSviz seems to confirm the problem: https://dnsviz.net/d/sportbladet.se/Yf1XbQ/dnssec/ The signature of the NSEC record looks strange to me: % dig @a.ns.se. +dnssec A sportbladet.se ; <<>> DiG 9.16.1-Ubuntu <<>> @a.ns.se. +dnssec A sportbladet.se ; (2 servers found) ;; global options:

[dns-operations] Slack.com DNSSEC on Feb 12th 15:00 UTC

2022-02-04 Thread Rafael Elvira via dns-operations
--- Begin Message --- Hello everyone, I'm reaching out from the traffic team over at Slack . As many of you might be aware, we had a series of unfortunate attempts to enable DNSSEC on slack.com last year.