nanog mailing list archives

Re: DNSSEC broken for login.microsoftonline.com


From: Tony Finch <dot () dotat at>
Date: Wed, 28 Oct 2015 10:08:38 +0000

Bruce Curtis <bruce.curtis () ndsu edu> wrote:

  Drill run on one of our name servers shows that the error is

      Existence denied: microsoftonline.com

No, drill just says there are no DS records which means the domain is
insecure so any problems with it should be unrelated to DNSSEC.

[T] Existence denied: microsoftonline.com. DS
;; No ds record for delegation
;; Domain: microsoftonline.com.
;; No DNSKEY record found for microsoftonline.com.
;; No DS for login.microsoftonline.com.;; No ds record for delegation
;; Domain: login.microsoftonline.com.
;; No DNSKEY record found for login.microsoftonline.com.

Tony.
-- 
f.anthony.n.finch  <dot () dotat at>  http://dotat.at/
North Utsire: Variable 4, but southeasterly 5 to 7 in southwest, perhaps gale
8 later in far southwest. Rough in southwest, otherwise slight or moderate.
Fair. Good.


Current thread: