Live data from Hacker News

DNSSEC disruption affecting .de domains – Resolved

status.denic.de

31–40 of 440 posts

Re: DNSSEC disruption affecting .de domains – Resolved

#33
post #18

Yes, all .de domains down because of DNSSEC failure at Denic https://dnsviz.net/d/de/dnssec/

https://i.imgur.com/eAwdKEC.png Edit: Alternative link: https://www.cyberciti.biz/media/new/cms/2017/04/dns.jpg

  {"data":{"error":"Imgur is temporarily over capacity. Please try again later."},"success":false,"status":403}
There is some strange irony to this, I suppose.

Re: DNSSEC disruption affecting .de domains – Resolved

#37
post #24

Earlier quoted context omitted.

bmw.de is down for me too

Both domains page load for me from Amsterdam. I wonder if there's communication disruption. Undersea cable severed?

$ nslookup bmw.de ~ Server: 8.8.8.8 Address: 8.8.8.8#53

Non-authoritative answer: Name: bmw.de Address: 160.46.226.165

$ nslookup www.bmw.de ~ ;; Got SERVFAIL reply from 8.8.8.8, trying next server Server: 8.8.4.4 Address: 8.8.4.4#53

* server can't find www.bmw.de: SERVFAIL

Re: DNSSEC disruption affecting .de domains – Resolved

#38
post #18

Earlier quoted context omitted.

https://i.imgur.com/eAwdKEC.png Edit: Alternative link: https://www.cyberciti.biz/media/new/cms/2017/04/dns.jpg

{"data":{"error":"Imgur is temporarily over capacity. Please try again later."},"success":false,"status":403} There is some strange irony to this, I suppose.

In my experience, that error is a lie and is what you get if they've IP blocked you. (Easy to hit on a VPN, in particular)

Re: DNSSEC disruption affecting .de domains – Resolved

#39
I work with a few people specialised in IT security, and some of them take their jobs too seriously and will "lock down" everything to the point that it becomes a very real risk that they lock out everyone including themselves.

Fundamentally, security is a solution to an availability problem: The desire of the users is for a system to remain available despite external attack.

Systems that become unavailable to everyone fail this requirement.

A door with its keyhole welded shut is not "secure", it's broken.

Post reply on HN