Re: [dns-operations] [outa...@outages.org: [outages] DNSSEC issues .se]

2022-02-04 Thread Viktor Dukhovni
On Fri, Feb 04, 2022 at 05:48:41PM +0100, Stephane Bortzmeyer wrote: > From: Jonathan Sélea via Outages > To: "outa...@outages.org" > Subject: [outages] DNSSEC issues .se > > Apparently, if a unsigned domain is followed by a signed domain in the > .se zone - the domain wont resolve due to NSEC

Re: [dns-operations] [outa...@outages.org: [outages] DNSSEC issues .se]

2022-02-04 Thread Viktor Dukhovni
On Fri, Feb 04, 2022 at 05:48:41PM +0100, Stephane Bortzmeyer wrote: > Indeed, DNSviz seems to confirm the problem: > > https://dnsviz.net/d/sportbladet.se/Yf1XbQ/dnssec/ > > The signature of the NSEC record looks strange to me: > > sportbladet.se. 7200 IN RRSIG NSEC 8 2 7200 ( >

[dns-operations] [outa...@outages.org: [outages] DNSSEC issues .se]

2022-02-04 Thread Stephane Bortzmeyer
Indeed, DNSviz seems to confirm the problem: https://dnsviz.net/d/sportbladet.se/Yf1XbQ/dnssec/ The signature of the NSEC record looks strange to me: % dig @a.ns.se. +dnssec A sportbladet.se ; <<>> DiG 9.16.1-Ubuntu <<>> @a.ns.se. +dnssec A sportbladet.se ; (2 servers found) ;; global options: