[185558] in North American Network Operators' Group
Re: DNSSEC broken for login.microsoftonline.com
daemon@ATHENA.MIT.EDU (Tony Finch)
Tue Oct 27 13:35:28 2015
X-Original-To: nanog@nanog.org
Date: Tue, 27 Oct 2015 17:35:23 +0000
From: Tony Finch <dot@dotat.at>
To: Bruce Curtis <bruce.curtis@ndsu.edu>
In-Reply-To: <849F2BEE-3E0A-4694-B9F5-27CDFCC79266@ndsu.edu>
Cc: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
Bruce Curtis <bruce.curtis@ndsu.edu> wrote:
>
> FYI our DNS requests to resolve login.microsoftonline.com are failing
> because of a DNSSEC error.
There's no DS record for microsoftonline.com so you shouldn't have any
DNSSEC problems with it - my servers can resolve it OK. DNSvis doesn't
show any problems. The only thing which might cause trouble is the
SERVFAIL responses to DNSKEY queries flagged by the Verisign DNSSEC
debugger.
> http://dnssec-debugger.verisignlabs.com/login.microsoftonline.com
>
> http://dnsviz.net/d/login.microsoftonline.com/dnssec/
Tony.
--
f.anthony.n.finch <dot@dotat.at> http://dotat.at/
Fitzroy, Sole: Cyclonic, mainly southwesterly, 5 to 7, occasionally gale 8 in
west Fitzroy. Very rough or high, becoming rough in Sole. Rain or thundery
showers. Moderate or poor, occasionally good.
