On Wed, Jul 29, 2015 at 2:17 AM, Lightner, Jeff <jlight...@dsservices.com> wrote: > http://www.vip.icann.org/DS? Your email client made it a hyperlink, not me. That's the response for DS record.
>>> I configured bind to forward queries to 8.8.8.8 dig www.vip.icann.org ds @8.8.8.8 returns SERVFAIL (NOERROR with +cd), but 4.4.4.4 and 208.67.222.222 returns NOERROR the query error log can be replicated with "dig www.vip.icann.org ds" This sounds like a DNSSEC validation issue, but why would I get DNS format error in the log still not sure why the browser tried to get ds record for www.vip.icann.org in first place (I am unaware of any subdomains in www.vip.icann.org), probably DNS prefetching? _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
