2013/10/31 Chris Thompson <[email protected]> > On Oct 24 2013, I wrote: > > [...] > >> But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a bit >> >> broken, in that NXDOMAIN responses don't validate properly. >> > > and there were some followups. > > Just to note that this has been fixed by now - the right NSEC3 records > and their signatures are being returned.
We met very similar symptoms when we were signing our zones. BIND simply didn't generate NSEC3 unless restarted. > > > -- > Chris Thompson University of Cambridge Computing Service, > Email: [email protected] Roger Needham Building, 7 JJ Thomson Avenue, > Phone: +44 1223 334715 Cambridge CB3 0RB, United Kingdom. > _______________________________________________ > dns-operations mailing list > [email protected] > https://lists.dns-oarc.net/mailman/listinfo/dns-operations > dns-jobs mailing list > https://lists.dns-oarc.net/mailman/listinfo/dns-jobs > -- Is there any problem Exterminatus cannot solve? I have not found one yet.
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
