Anyone else seeing DNSSEC failures from EU Commission ? (european-union.europa.eu)

Marco Davids (Private) mdavids at forfun.net
Wed Dec 8 13:35:01 UTC 2021


Hi Laura,

Something seems the matter, indeed:

https://dnsviz.net/d/european-union.europa.eu/YbCzrQ/dnssec/

It's weird; 1.1.1.1 resolves, 8.8.8.8 and 9.9.9.9 return SERVFAIL.

-- 
Marco


Op 08-12-2021 om 14:27 schreef Laura Smith via NANOG:

> Bit of a long stretch given the US audience, but I'm seeing lots of things like this at the moment:
> 
> info: validation failure <european-union.europa.eu. AAAA IN>: key for validation european-union.europa.eu. is marked as invalid because of a previous validation failure <european-union.europa.eu. AAAA IN>: DS got unsigned CNAME answer from 2600:9000:5301:a200::1 and 34.255.155.194 for DS european-union.europa.eu. while building chain of trust
> 
> info: validation failure <european-union.europa.eu. AAAA IN>: DS got unsigned CNAME answer from 2600:9000:5302:9a00::1 and 34.255.155.194 for DS european-union.europa.eu. while building chain of trust
> 
> validation failure <europa.eu. A IN>: signatures from unknown keys from 147.67.12.3
> 
> info: validation failure <europa.eu. AAAA IN>: signatures from unknown keys from 147.67.12.3
> 


More information about the NANOG mailing list