[185574] in North American Network Operators' Group
Re: DNSSEC broken for login.microsoftonline.com
daemon@ATHENA.MIT.EDU (=?iso-8859-2?Q?Avdija_Ahmedhod=BEi)
Wed Oct 28 02:20:38 2015
X-Original-To: nanog@nanog.org
From: =?iso-8859-2?Q?Avdija_Ahmedhod=BEi=E6?= <Avdija@Link.ba>
To: Tony Finch <dot@dotat.at>
Date: Tue, 27 Oct 2015 19:38:30 +0000
In-Reply-To: <alpine.LSU.2.00.1510271732560.25050@hermes-2.csi.cam.ac.uk>
Cc: nanog <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Also, ns2.bdm.microsoftonline.com is offline for about 12 hours
> On 27 Oct 2015, at 18:35, Tony Finch <dot@dotat.at> wrote:
>=20
> Bruce Curtis <bruce.curtis@ndsu.edu> wrote:
>>=20
>> FYI our DNS requests to resolve login.microsoftonline.com are failing
>> because of a DNSSEC error.
>=20
> There's no DS record for microsoftonline.com so you shouldn't have any
> DNSSEC problems with it - my servers can resolve it OK. DNSvis doesn't
> show any problems. The only thing which might cause trouble is the
> SERVFAIL responses to DNSKEY queries flagged by the Verisign DNSSEC
> debugger.
>=20
>> http://dnssec-debugger.verisignlabs.com/login.microsoftonline.com
>>=20
>> http://dnsviz.net/d/login.microsoftonline.com/dnssec/
>=20
> Tony.
> --=20
> f.anthony.n.finch <dot@dotat.at> http://dotat.at/
> Fitzroy, Sole: Cyclonic, mainly southwesterly, 5 to 7, occasionally gale =
8 in
> west Fitzroy. Very rough or high, becoming rough in Sole. Rain or thunder=
y
> showers. Moderate or poor, occasionally good.
