.biz DNSSEC borked

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Sun Jun 23 23:49:14 UTC 2013


On Sat, 22 Jun 2013 20:45:44 +0200, Andre Tomt said:
> Seems the entire .biz tld is failing DNSSEC validation now.
> All of my DNSSEC validating resolvers are tossing all domains in .biz.
> The non-signed domains too of course because trust of the tld itself
> cannot be established.
>
> http://dnssec-debugger.verisignlabs.com/nic.biz

So which event caused more disruption?  50K .com's in a failed DDoS
mitigation, or every single .biz lookup by something that actually does
dnssec?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 865 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20130623/af4f23b7/attachment.sig>


More information about the NANOG mailing list