DNSSEC broken for login.microsoftonline.com

Tue Oct 27 20:24:11 UTC 2015

> On Oct 27, 2015, at 2:38 PM, Avdija Ahmedhodžić <Avdija at Link.ba> wrote:
> 
> Also, ns2.bdm.microsoftonline.com is offline for about 12 hours

  The problems started yesterday, more than 12 hours ago.

Thanks.

> 
>> On 27 Oct 2015, at 18:35, Tony Finch <dot at dotat.at> wrote:
>> 
>> Bruce Curtis <bruce.curtis at ndsu.edu> wrote:
>>> 
>>> FYI our DNS requests to resolve login.microsoftonline.com are failing
>>> because of a DNSSEC error.
>> 
>> There's no DS record for microsoftonline.com so you shouldn't have any
>> DNSSEC problems with it - my servers can resolve it OK. DNSvis doesn't
>> show any problems. The only thing which might cause trouble is the
>> SERVFAIL responses to DNSKEY queries flagged by the Verisign DNSSEC
>> debugger.
>> 
>>> http://dnssec-debugger.verisignlabs.com/login.microsoftonline.com
>>> 
>>> http://dnsviz.net/d/login.microsoftonline.com/dnssec/
>> 
>> Tony.
>> -- 
>> f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
>> Fitzroy, Sole: Cyclonic, mainly southwesterly, 5 to 7, occasionally gale 8 in
>> west Fitzroy. Very rough or high, becoming rough in Sole. Rain or thundery
>> showers. Moderate or poor, occasionally good.
> 

---
Bruce Curtis                         bruce.curtis at ndsu.edu
Certified NetAnalyst II                701-231-8527
North Dakota State University        