* Peter Andreev [2013-11-05 16:26]: > > 2013/10/31 Chris Thompson <[email protected] <mailto:[email protected]>> > > On Oct 24 2013, I wrote: > > [...] > > But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a bit > > broken, in that NXDOMAIN responses don't validate properly. > > > and there were some followups. > > Just to note that this has been fixed by now - the right NSEC3 records > and their signatures are being returned. > > > We met very similar symptoms when we were signing our zones. BIND > simply didn't generate NSEC3 unless restarted.
The operator of xn--80asehdb. and xn--80aswg. is using a custom-made name server according to their version.bind. Regards, Matt -- Universität Duisburg-Essen Verteilte Systeme Bismarckstr. 90 / BC 316 47057 Duisburg
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
