[185576] in North American Network Operators' Group
Re: DNSSEC broken for login.microsoftonline.com
daemon@ATHENA.MIT.EDU (Tony Finch)
Wed Oct 28 06:08:45 2015
X-Original-To: nanog@nanog.org
Date: Wed, 28 Oct 2015 10:08:38 +0000
From: Tony Finch <dot@dotat.at>
To: Bruce Curtis <bruce.curtis@ndsu.edu>
In-Reply-To: <D94BD500-C8AB-41D1-813E-FB81100AA392@ndsu.edu>
Cc: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
Bruce Curtis <bruce.curtis@ndsu.edu> wrote:
> Drill run on one of our name servers shows that the error is
>
> Existence denied: microsoftonline.com
No, drill just says there are no DS records which means the domain is
insecure so any problems with it should be unrelated to DNSSEC.
> [T] Existence denied: microsoftonline.com. DS
> ;; No ds record for delegation
> ;; Domain: microsoftonline.com.
> ;; No DNSKEY record found for microsoftonline.com.
> ;; No DS for login.microsoftonline.com.;; No ds record for delegation
> ;; Domain: login.microsoftonline.com.
> ;; No DNSKEY record found for login.microsoftonline.com.
Tony.
--
f.anthony.n.finch <dot@dotat.at> http://dotat.at/
North Utsire: Variable 4, but southeasterly 5 to 7 in southwest, perhaps gale
8 later in far southwest. Rough in southwest, otherwise slight or moderate.
Fair. Good.
