nanog mailing list archives

Re: .biz DNSSEC borked


From: Valdis.Kletnieks () vt edu
Date: Sun, 23 Jun 2013 19:49:14 -0400

On Sat, 22 Jun 2013 20:45:44 +0200, Andre Tomt said:
Seems the entire .biz tld is failing DNSSEC validation now.
All of my DNSSEC validating resolvers are tossing all domains in .biz.
The non-signed domains too of course because trust of the tld itself
cannot be established.

http://dnssec-debugger.verisignlabs.com/nic.biz

So which event caused more disruption?  50K .com's in a failed DDoS
mitigation, or every single .biz lookup by something that actually does
dnssec?

Attachment: _bin
Description:


Current thread: