Finally establishing the concept of Feiertag on the internet. Come back tomorrow.
[flagged]
DNSSEC disruption affecting .de domains – Resolved
61–70 of 440 posts
Re: DNSSEC disruption affecting .de domains – Resolved
#62How come I have zero problems with any .de domain I tried accessing in the last half hour?
maybe your upstream doesn't validate DNSSEC?
Re: DNSSEC disruption affecting .de domains – Resolved
#63Earlier quoted context omitted.
This works: $ unbound-host -t A www.denic.de www.denic.de has address 81.91.170.12 This does not: $ unbound-host -D -t A www.denic.de www.denic.de has address 81.91.170.12 validation failure : signature crypto failed from 194.246.96.1 for DS denic.de. while building chain of trust So it does seem DNSSEC-related. EDIT My explanation was wrong, this is not how keytags work. The published keytag data is consistent: de.…
[deleted]
[dead]
Re: DNSSEC disruption affecting .de domains – Resolved
#64Mailbox.org (also from Germany) seems to be experiencing issues too.
Re: DNSSEC disruption affecting .de domains – Resolved
#65I work with a few people specialised in IT security, and some of them take their jobs too seriously and will "lock down" everything to the point that it becomes a very real risk that they lock out everyone including themselves. Fundamentally, security is a solution to an availability problem: The desire of the users is for a system to remain available despite external attack. Systems that become unavailable to everyo…
Security = Confidentiality + Integrity + Availability
or alternatively,
Security = (exclude unauth'd reads) + (exclude unauth'd writes) + (include auth'd reads and auth'd writes)
Gotta satisfy all parts in order to have security.
Re: DNSSEC disruption affecting .de domains – Resolved
#66I must be early. There's not a single tptacek DNSSEC rant in this thread yet.
Re: DNSSEC disruption affecting .de domains – Resolved
#67Re: DNSSEC disruption affecting .de domains – Resolved
#68I've considered hard-coding some addresses into firmware as a fallback for a DNS outtage (which is more likely than not just misconfigured local DNS.) Events like this help justify this approach to the unconcerned.
Re: DNSSEC disruption affecting .de domains – Resolved
#69how is that possible?
Re: DNSSEC disruption affecting .de domains – Resolved
#70So glad I found someone mention this. Amazon.de, SPIEGEL.de is down. Highly prominent sites unreachable. I wonder how long this will last and how big of a thing this ends up being once people talk about it :o Feels big to me
idealo.de, ebay.de, and spiegel.de are down, but amazon.de opens for me.