Re: Unusual DNSSEC errors involving g.gtld-servers.net

2012-02-28 Thread Mark Andrews
In message , Wolfgang N agele writes: > Hi Rob, > > VeriSign contact as the operator of g.gtld-servers.net in CC. > > I think your resolver is noticing the right thing here. When running multip= > le queries against this server I occassionally receive a response that inde= > ed has no signatures

Re: Unusual DNSSEC errors involving g.gtld-servers.net

2012-02-28 Thread Wolfgang Nagele
Hi Rob, VeriSign contact as the operator of g.gtld-servers.net in CC. I think your resolver is noticing the right thing here. When running multiple queries against this server I occassionally receive a response that indeed has no signatures: $ dig @192.42.93.30 google.com +dnssec +norec ; <<>

Unusual DNSSEC errors involving g.gtld-servers.net

2012-02-28 Thread Rob Leslie
Hello all, Recently I’ve started getting numerous errors in my logs of the form: Feb 24 15:12:50 server named[3511]: validating @0xb8976b78: com SOA: got insecure response; parent indicates it should be secure Feb 24 15:12:50 server named[3511]: error (no valid RRSIG) resolving 'google.com/DS