Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DNSSEC disruption affecting .de domains – Resolved

status.denic.de

Post reply on HN
Print view View original

21–30 of 440 posts

Re: DNSSEC disruption affecting .de domains – Resolved

#23

Post by 1vuio0pswjnm7 »

.de TLD is online. DNS working fine

DNSSEC not working

If using an open resolver, i.e., a shared DNS cache, e.g., third party DNS service such as Google, Cloudflare, etc., then it might fail, or it might not. It depends on the third party DNS provider

https://datatracker.ietf.org/meeting/118/materials/slides-11...

Re: DNSSEC disruption affecting .de domains – Resolved

#26

Post by [deleted] »

fweimer wrote: post #9
warpspin wrote: post #2

Whole .de TLD seems to go offline right now due to dnssec or missing nic.de nameservers?

This works: $ unbound-host -t A www.denic.de www.denic.de has address 81.91.170.12 This does not: $ unbound-host -D -t A www.denic.de www.denic.de has address 81.91.170.12 validation failure : signature crypto failed from 194.246.96.1 for DS denic.de. while building chain of trust So it does seem DNSSEC-related. EDIT My explanation was wrong, this is not how keytags work. The published keytag data is consistent: de.…

[deleted]

Re: DNSSEC disruption affecting .de domains – Resolved

#27

Post by fossdd »

phit_ wrote: post #12
binghatch wrote: post #10

Wow… it’s definitely not all .de TLDs, but a lot of prominent ones definitely.

its gonna be all .de domains once caches dry out, anything that still works right now is bound to eventually fail until the underlying issue is resolved

Any .de domain with DNSSEC
Post reply on HN