2013/11/5 Matthäus Wander <[email protected]> > * Peter Andreev [2013-11-05 16:26]: > > > > 2013/10/31 Chris Thompson <[email protected] <mailto:[email protected]>> > > > > On Oct 24 2013, I wrote: > > > > [...] > > > > But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a > bit > > > > broken, in that NXDOMAIN responses don't validate properly. > > > > > > and there were some followups. > > > > Just to note that this has been fixed by now - the right NSEC3 > records > > and their signatures are being returned. > > > > > > We met very similar symptoms when we were signing our zones. BIND > > simply didn't generate NSEC3 unless restarted. > > The operator of xn--80asehdb. and xn--80aswg. is using a custom-made > name server according to their version.bind. >
Their version.bind looks REFUSED for me. AFAIK this is the default behaviour of all major nameserver implementations. So I'm not sure if they use modified BIND or completely selfmade server. > > Regards, > Matt > > -- > Universität Duisburg-Essen > Verteilte Systeme > Bismarckstr. 90 / BC 316 > 47057 Duisburg > > > _______________________________________________ > dns-operations mailing list > [email protected] > https://lists.dns-oarc.net/mailman/listinfo/dns-operations > dns-jobs mailing list > https://lists.dns-oarc.net/mailman/listinfo/dns-jobs > -- Is there any problem Exterminatus cannot solve? I have not found one yet.
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
