Re: [Sks-devel] DNS broken for hkps.pool.sks-keyservers.net

[Daniel Austin]

Hi,

All my secondaries (ns.dan.*) should validate fine with EDNS0 packets, so this should be a fairly minimal issue (although one that should still be addressed).

For hkps.pool.sks-keyservers.net, we'll need to wait for Kristian to take a look as it doesn't appear to be in the zonefile at the moment.

Thanks,

Dan.

On Mon, Mar 18, 2019 at 15:47, Jim Popovitch <address@hidden> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Mon, 2019-03-18 at 11:42 -0400, Jim Popovitch wrote:

On Mon, 2019-03-18 at 08:27 -0700, Sparr wrote:

hkps.pool.sks-keyservers.net does not seem to resolve currently,
from public or local or whois-authoritative nameservers.

There's also been quite a few DNSSEC validation errors for RSIGs, for some
time now.

Sorry, wrong error for that domain.  sks-keyservers.net has EDNS0 issues not
RSIG errors. (DNS Flag Day was last month)

https://ednscomp.isc.org/ednscomp/57d26bc180

- -Jim P.
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEECPbAhaBWEfiXj/kxdRlcPb+1fkUFAlyPvVsACgkQdRlcPb+1
fkXdnw//Xga1uS9YPH/3OoavB26YgQ5vaPHoPNBPggSWK++F9idoSK11+NF5Hg1S
s2rW00zuoQyIIMbJ5Zel582i1ZgP+arfNDMmY7wlhgFf+XIcMIaLsuzZ6SohTbdm
H6P+97KMvLeIaSD6YyWFg+kZV6e/U9HGMUQewECKGKbpvfgu/6jMRKmuSiSq1mQ4
7zUBgCUop8l+bk6kYFim93+Jx764Y+JJtdDJeqJtfiJv2LYYIvJ++PJq7uC6HPIy
FnGxAdoRtZ0ZK1mSwlAkuz2f4mOxIhlW0MJaW5S1X30gFDrIpeMFeTYM1RSn+wbf
MEelNPgunjzI2kosrJ5OeYbgI0eTMOKyvymZt0CIfPDSWnGYlCUirI3kQaFpNJy8
6bCo5dYBj5x6iK1Rx5nzZC4fa0jECONc0XrgNbaIPT6xEd+/dGdzBTMCzeml+LOX
+3Ils4w6Qn6UJPPB925iRd+slxZcMnSUAFSsNMa9fH4u/4XPJtOq/ju4fAhSnUzL
iqaP61WNYb20gtm+CgSd6xka+Eq5ltUkoQY6Ut5IziRItg7SQ7WQruzfW5BL3d+Y
KgcsC1J7KiukaxtmjD6lOZbiLTH7AqVj4RUKJ+5hFMSIkjq+wy2i738wn/ShMkg3
26b5qyQEQ4yy6Eeq93KFJj/vn0kv8IIJd9Xm9FRCYc+bmQ8M6Lk=
=cFT6
-----END PGP SIGNATURE-----

_______________________________________________
Sks-devel mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/sks-devel