Hi, All my secondaries (ns.dan.*) should validate fine with EDNS0 packets, so this should be a fairly minimal issue (although one that should still be addressed). For hkps.pool.sks-keyservers.net, we'll need to wait for Kristian to take a look as it doesn't appear to be in the zonefile at the moment. Thanks, Dan. On Mon, Mar 18, 2019 at 15:47, Jim Popovitch wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
On Mon, 2019-03-18 at 11:42 -0400, Jim Popovitch wrote: On Mon, 2019-03-18 at 08:27 -0700, Sparr wrote: hkps.pool.sks-keyservers.net does not seem to resolve currently, from public or local or whois-authoritative nameservers. There's also been quite a few DNSSEC validation errors for RSIGs, for some time now. Sorry, wrong error for that domain. sks-keyservers.net has EDNS0 issues not RSIG errors. (DNS Flag Day was last month) https://ednscomp.isc.org/ednscomp/57d26bc180 (https://ednscomp.isc.org/ednscomp/57d26bc180) - -Jim P. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECPbAhaBWEfiXj/kxdRlcPb+1fkUFAlyPvVsACgkQdRlcPb+1 fkXdnw//Xga1uS9YPH/3OoavB26YgQ5vaPHoPNBPggSWK++F9idoSK11+NF5Hg1S s2rW00zuoQyIIMbJ5Zel582i1ZgP+arfNDMmY7wlhgFf+XIcMIaLsuzZ6SohTbdm H6P+97KMvLeIaSD6YyWFg+kZV6e/U9HGMUQewECKGKbpvfgu/6jMRKmuSiSq1mQ4 7zUBgCUop8l+bk6kYFim93+Jx764Y+JJtdDJeqJtfiJv2LYYIvJ++PJq7uC6HPIy FnGxAdoRtZ0ZK1mSwlAkuz2f4mOxIhlW0MJaW5S1X30gFDrIpeMFeTYM1RSn+wbf MEelNPgunjzI2kosrJ5OeYbgI0eTMOKyvymZt0CIfPDSWnGYlCUirI3kQaFpNJy8 6bCo5dYBj5x6iK1Rx5nzZC4fa0jECONc0XrgNbaIPT6xEd+/dGdzBTMCzeml+LOX +3Ils4w6Qn6UJPPB925iRd+slxZcMnSUAFSsNMa9fH4u/4XPJtOq/ju4fAhSnUzL iqaP61WNYb20gtm+CgSd6xka+Eq5ltUkoQY6Ut5IziRItg7SQ7WQruzfW5BL3d+Y KgcsC1J7KiukaxtmjD6lOZbiLTH7AqVj4RUKJ+5hFMSIkjq+wy2i738wn/ShMkg3 26b5qyQEQ4yy6Eeq93KFJj/vn0kv8IIJd9Xm9FRCYc+bmQ8M6Lk= =cFT6 -----END PGP SIGNATURE----- _______________________________________________ Sks-devel mailing list Sks-devel@nongnu.org (mailto:Sks-devel@nongnu.org) https://lists.nongnu.org/mailman/listinfo/sks-devel (https://lists.nongnu.org/mailman/listinfo/sks-devel)
_______________________________________________ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel