Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DNSSEC disruption affecting .de domains – Resolved

status.denic.de

Post reply on HN
Print view View original

51–60 of 440 posts

Re: DNSSEC disruption affecting .de domains – Resolved

#52

Post by Bender »

kuerbel wrote: post #29

I just spent the better half of an hour to debug unbound and the pihole because I thought it's a me problem... Good news though, if you add domain-insecure: "de" to your unbound config everything works fine

I don't even enable DNSSEC in Unbound. There just isn't enough adoption yet for me to feel like I am missing out on something, yet.

"Cloudflare Radar data shows 8.11% of domains are signed with DNSSEC, but only 0.47% of queries are validated end-to-end." [1]

Zones I may care about:

- Amazon.com: unsigned

- My banks: unsigned

- Hacker News: unsigned

- Email that I do not host: unsigned

- My power companies billing: unsigned

- I found some! id.me and irs.gov are signed.

[1] - https://technologychecker.io/blog/dnssec-adoption

Re: DNSSEC disruption affecting .de domains – Resolved

#54

Post by dark-star »

MikeNotThePope wrote: post #35
benny_s wrote: post #24

Earlier quoted context omitted.

bmw.de is down for me too

Both domains page load for me from Amsterdam. I wonder if there's communication disruption. Undersea cable severed?

You mean the big undersea cable between the Netherlands and Germany? ;-)

Re: DNSSEC disruption affecting .de domains – Resolved

#55

Post by QuantumNomad_ »

jiggawatts wrote: post #39

I work with a few people specialised in IT security, and some of them take their jobs too seriously and will "lock down" everything to the point that it becomes a very real risk that they lock out everyone including themselves. Fundamentally, security is a solution to an availability problem: The desire of the users is for a system to remain available despite external attack. Systems that become unavailable to everyo…

Security is not just a solution to availability. It is also to keep sensitive data (PII, or business secrets, or passwords, or cryptographic private keys, and so on) away from the hands of bad actors.

If I’m unable to use Amazon for 24 hours it doesn’t really matter. If a photo copy of my passport is leaked that’s worries and potential troubles for years.

Re: DNSSEC disruption affecting .de domains – Resolved

#60

Post by ricardo81 »

notpushkin wrote: post #33
taegee wrote: post #18

Earlier quoted context omitted.

https://i.imgur.com/eAwdKEC.png Edit: Alternative link: https://www.cyberciti.biz/media/new/cms/2017/04/dns.jpg

{"data":{"error":"Imgur is temporarily over capacity. Please try again later."},"success":false,"status":403} There is some strange irony to this, I suppose.

I get "content not viewable in your region", from the UK. Not an ideal image sharing website nowadays.
Post reply on HN