Re: .biz DNSSEC borked

2013-06-23 Thread Franck Martin
On Jun 23, 2013, at 4:49 PM, valdis.kletni...@vt.edu wrote: > On Sat, 22 Jun 2013 20:45:44 +0200, Andre Tomt said: >> Seems the entire .biz tld is failing DNSSEC validation now. >> All of my DNSSEC validating resolvers are tossing all domains in .biz. >> The non-signed domains too of course becau

Re: .biz DNSSEC borked

2013-06-23 Thread Jared Mauch
On Sun, Jun 23, 2013 at 07:49:14PM -0400, valdis.kletni...@vt.edu wrote: > On Sat, 22 Jun 2013 20:45:44 +0200, Andre Tomt said: > > Seems the entire .biz tld is failing DNSSEC validation now. > > All of my DNSSEC validating resolvers are tossing all domains in .biz. > > The non-signed domains too o

Re: .biz DNSSEC borked

2013-06-23 Thread Valdis . Kletnieks
On Sat, 22 Jun 2013 20:45:44 +0200, Andre Tomt said: > Seems the entire .biz tld is failing DNSSEC validation now. > All of my DNSSEC validating resolvers are tossing all domains in .biz. > The non-signed domains too of course because trust of the tld itself > cannot be established. > > http://dnss

Re: .biz DNSSEC borked

2013-06-23 Thread Franck Martin
Another Internet reboot? Can we find something better? On Jun 22, 2013, at 2:15 PM, Andre Tomt wrote: > On 22. juni 2013 20:45, Andre Tomt wrote: >> Seems the entire .biz tld is failing DNSSEC validation now. >> All of my DNSSEC validating resolvers are tossing all domains in .biz. >> The non-s

Re: .biz DNSSEC borked

2013-06-22 Thread Andre Tomt
On 22. juni 2013 20:45, Andre Tomt wrote: Seems the entire .biz tld is failing DNSSEC validation now. All of my DNSSEC validating resolvers are tossing all domains in .biz. The non-signed domains too of course because trust of the tld itself cannot be established. http://dnssec-debugger.verisign

Re: .biz DNSSEC borked

2013-06-22 Thread jamie rishaw
confirmed None of the 5 DNSKEY records could be validated by any of the 2 DS records The DNSKEY RRset was not signed by any keys in the chain-of-trust biz has SOA record a.gtld.biz. hostmaster.neustar.biz. 12161960 900 900 604800 86400 (BOGUS (security failure)) validation failure : no keys hav

.biz DNSSEC borked

2013-06-22 Thread Andre Tomt
Seems the entire .biz tld is failing DNSSEC validation now. All of my DNSSEC validating resolvers are tossing all domains in .biz. The non-signed domains too of course because trust of the tld itself cannot be established. http://dnssec-debugger.verisignlabs.com/nic.biz