Am 02.02.2016 um 13:30 schrieb Andreas Pothe: > Deutsche Postbank has some issues on its DNS servers: > http://dnsviz.net/d/postbank.de/dnssec/ > http://dnsviz.net/d/dslbank.de/dnssec/ > http://dnsviz.net/d/bhw.de/dnssec/ (postbank|dslbank|bhw).de/DNSKEY: > The response (512 bytes) was malformed. (62.153.105.1, 62.153.105.2, > 195.50.155.127, UDP_0_EDNS0_32768_512) May this cause the reported > problems on some systems? In fact I know Deutsche Postbank AG do not > promote any TLSA / DANE records for any of its domains.
Oh, dslbank.de has a corrupt DS entry at .de level (DS without corresponding DNSKEY). This can make trouble too, I think.
