UltraDNS has identified an issue with NSEC signed zones with empty-non-terminals. We are working to correct this behavior and plan to have a fix deployed shortly after the new year.
- Steve De Jong On Dec 28, 2019, at 9:59 AM, Viktor Dukhovni <ietf-d...@dukhovni.org<mailto:ietf-d...@dukhovni.org>> wrote: On Sat, Dec 28, 2019 at 04:47:27PM +0000, Matt Nordhoff wrote: It looks like this is a more widespread Neustar issue. A domain using Namecheap's DNS service -- which now outsources the DNS servers to Neustar -- ran into the same issue. ... Namecheap and PayPal could still be using the same software at another point in their stacks, but it seems more likely that the problem is on Neustar's end. Again not clear whether the zone is signed by Neustar, or they're just serving a replica that was incorrectly signed elsewhere. -- Viktor. _______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net<mailto:dns-operations@lists.dns-oarc.net> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.dns-2Doarc.net_mailman_listinfo_dns-2Doperations&d=DwICAg&c=MOptNlVtIETeDALC_lULrw&r=dDmVb52uNro62vP-w97PFD14RmhK5frGLUBkTeDmEC0&m=JqLYCsYWyaVEbTxyywQDZxQdMnygJz6fV6fho92kxcI&s=YljKKKxwzwI57brbcCagtIP0D22yWnEwh0t9VkOay_8&e=
_______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
