[164020] in North American Network Operators' Group
Re: .biz DNSSEC borked
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Sun Jun 23 19:51:58 2013
To: Andre Tomt <andre-nanog@tomt.net>
In-Reply-To: Your message of "Sat, 22 Jun 2013 20:45:44 +0200."
<51C5F0D8.3050706@tomt.net>
From: Valdis.Kletnieks@vt.edu
Date: Sun, 23 Jun 2013 19:49:14 -0400
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1372031354_2179P
Content-Type: text/plain; charset=us-ascii
On Sat, 22 Jun 2013 20:45:44 +0200, Andre Tomt said:
> Seems the entire .biz tld is failing DNSSEC validation now.
> All of my DNSSEC validating resolvers are tossing all domains in .biz.
> The non-signed domains too of course because trust of the tld itself
> cannot be established.
>
> http://dnssec-debugger.verisignlabs.com/nic.biz
So which event caused more disruption? 50K .com's in a failed DDoS
mitigation, or every single .biz lookup by something that actually does
dnssec?
--==_Exmh_1372031354_2179P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001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=odVU
-----END PGP SIGNATURE-----
--==_Exmh_1372031354_2179P--
