nanog mailing list archives

Re: DNSSEC & WIldcards

From: Bjørn Mork <bjorn () mork no>
Date: Fri, 15 Mar 2024 18:49:03 +0100

Matthew Pounsett <matt () conundrum com> writes:

But, right off the top I can see that your name server is returning the
NSEC record in the wrong section of the response.


No, the Authority section is correct here.  See:
https://datatracker.ietf.org/doc/html/rfc4035#section-3.1.3.3

But the RRSIG is missing.


Bjørn

Current thread:

DNSSEC & WIldcards Dennis Burgess via NANOG (Mar 15)
- Re: DNSSEC & WIldcards Niels Bakker (Mar 15)
  - Re: DNSSEC & WIldcards John Levine (Mar 15)
- Re: DNSSEC & WIldcards Bjørn Mork (Mar 15)
  - Re: DNSSEC & WIldcards Mark Andrews (Mar 15)
- Re: DNSSEC & WIldcards Matthew Pounsett (Mar 15)
  - Re: DNSSEC & WIldcards Bjørn Mork (Mar 15)
  - Re: DNSSEC & WIldcards Mark Andrews (Mar 15)
- Re: DNSSEC & WIldcards Bjørn Mork (Mar 15)
  - RE: DNSSEC & WIldcards Dennis Burgess via NANOG (Mar 15)
    - Re: DNSSEC & WIldcards Bjørn Mork (Mar 15)
    - Re: DNSSEC & WIldcards Mark Andrews (Mar 15)