I'm using Firefox 32.0.3 with plugin 2.1.2.
When I visit bad-sig.dane.verisignlabs.com, the entire Firefox process
hangs for a while and often crashes. If it doesn't crash, the I can see
behavior where the plugin appears to be stuck trying to resolve the
DNSSEC information (and doesn't give failure indications) for every open
tab, not just the bad-sig page. Weirdly, it'll show a green lock icon
for the DANE status, and a question mark for the DNSSEC status, a state
that should be impossible (since Dane status ought to depend on DNSSEC
status). At that, if Firefox doesn't crash immediately when the problem
happens, it'll usually crash a while later.
I've been using the plugin otherwise, and it's been fine for a couple
weeks. I've even found a few DNSSEC/DANE websites other than my own, and
haven't had any problems with the plugin or Firefox. Only do I have
problems when I visit bad-sig.dane.verisignlabs.com.
It's probably worth noting that my local resolver isn't configured to do
DNSSEC validation; my computer/Firefox is perfectly able to resolve and
visit hosts that have bogus DNSSEC info.
--Kevin
_______________________________________________
dnssec-validator-users mailing list
[email protected]
https://lists.nic.cz/cgi-bin/mailman/listinfo/dnssec-validator-users
