On Sun, Jun 07, 2015 at 11:18:11PM +0200, Jaap Akkerhuis <j...@nlnetlabs.nl> wrote a message of 12 lines which said:
> There are also expired sigs etc., see > <http://dnssec-debugger.verisignlabs.com/stratcom.mil>. And kingfisher1.stratcom.mil reply NXDOMAIN (with aa and ra...) to a request for a domain it is not authoritative for... % dig @143.250.3.75 SOA af ; <<>> DiG 9.9.5-9-Debian <<>> @143.250.3.75 SOA af ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43222 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;af. IN SOA ;; AUTHORITY SECTION: . 0 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. ( 2015052801 ; serial 1800 ; refresh (30 minutes) 900 ; retry (15 minutes) 604800 ; expire (1 week) 86400 ; minimum (1 day) ) ;; Query time: 603 msec ;; SERVER: 143.250.3.75#53(143.250.3.75) ;; WHEN: Mon Jun 08 10:23:38 CEST 2015 ;; MSG SIZE rcvd: 106 I hope that these people are more serious with strategic nuclear bombers... _______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs