-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On Mon, 2016-03-07 at 22:44 +0000, Tony Bunce wrote: > I'm far from a DNSSEC expert but I think the issue is with the entire > 65.in-addr.arpa zone. I can reproduce the issue on any PTR record > inside of 65.0.0.0/8.
Yes, arin.net failed to renew the dnssec signatures on 65.in-addr.arpa. They have expired, and anyone behind a dnssec enforcing resolver can no longer see ptr records in that tree. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iEYEAREKAAYFAlbeB/8ACgkQL6j7milTFsGHhQCfb6T+P9SV3UClUAYIYSnWHzfx edcAnjyFA50U5gkUXd5+RxempM7GoBuk =0ymm -----END PGP SIGNATURE----- _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop