DNSSEC & WIldcards

Fri Mar 15 17:35:58 UTC 2024

On Fri, Mar 15, 2024 at 11:26 AM Dennis Burgess via NANOG <nanog at nanog.org>
wrote:

> So have *.app.linktechs.net that I have been trying to get to work, we
> have DNSSEC on this, and its failing, but cannot for the life of me
> understand why.  I think it may have something to do with proving it exists
> as a wildcard, but any DNSSEC experts want to take a stab at it ?
>

As others have mentioned, the DNS-operations list would be a better place
to get help:  <https://lists.dns-oarc.net/mailman/listinfo/dns-operations>

But, right off the top I can see that your name server is returning the
NSEC record in the wrong section of the response.

>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20240315/b44b669c/attachment.html>