Re: [Dnsmasq-discuss] DNSSEC failure for dagjeuitactie.nl

2018-10-28 Thread Simon Kelley
There's a CNAME at the root of the domain, which is not permissible, and the root cause of the validation failure. https://medium.freecodecamp.org/why-cant-a-domain-s-root-be-a-cname-8cbab38e5f5c gives some reasons why this is not a good idea. What actually happens is that dnsmasq makes a

[Dnsmasq-discuss] DNSSEC failure for dagjeuitactie.nl

2018-10-26 Thread Willem Bargeman
Hi Simon, I received a message that the website dagjeuitactie.nl was not working. When I do a dig for this domain the status is SERVFAIL. dig dagjeuitactie.nl @127.0.0.1 -p 5353 ; <<>> DiG 9.10.3-P4-Ubuntu <<>> dagjeuitactie.nl @127.0.0.1 -p 5353 ;; global options: +cmd ;; Got answer: ;;