Looks like the DNSKEY RRsets have been updated. [beetle:~/git/bind9] marka% dig dnskey nlagriculture.nl ;; BADCOOKIE, retrying.
; <<>> DiG 9.15.4+hotspot+add-prefetch+marka <<>> dnskey nlagriculture.nl ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7327 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 2abce7afecaffe13010000005f7eb696ecc35e7f384fbd2b (good) ;; QUESTION SECTION: ;nlagriculture.nl. IN DNSKEY ;; ANSWER SECTION: nlagriculture.nl. 86400 IN DNSKEY 257 3 13 vRMOgGXuo/RaeD1XNWmDPvSDQDCNRa68OTq+/BqucA25ACppkunDt5fn RF2IL76ZpybyG7W8IBNYj7dpYrzWOg== ;; Query time: 1304 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Thu Oct 08 17:49:58 AEDT 2020 ;; MSG SIZE rcvd: 153 [beetle:~/git/bind9] marka% dig dnskey nlenergyandclimatechange.nl. ;; BADCOOKIE, retrying. ; <<>> DiG 9.15.4+hotspot+add-prefetch+marka <<>> dnskey nlenergyandclimatechange.nl. ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37042 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: d40d344c2a1b4a8f010000005f7eb6a96621ec9c6b9874ea (good) ;; QUESTION SECTION: ;nlenergyandclimatechange.nl. IN DNSKEY ;; ANSWER SECTION: nlenergyandclimatechange.nl. 86400 IN DNSKEY 257 3 13 SURx8TOW5B07Hl7VRfnR/OFKK5J1i2KX/6AiUSUtK/oAZFwYxIuH24xx ZOYGP9MB2ccKg7A0bv1liYpu7BmE0w== ;; Query time: 672 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Thu Oct 08 17:50:17 AEDT 2020 ;; MSG SIZE rcvd: 164 [beetle:~/git/bind9] marka% > On 7 Oct 2020, at 19:55, Marco Davids (SIDN) via dns-operations > <[email protected]> wrote: > > > From: "Marco Davids (SIDN)" <[email protected]> > Subject: Re: [dns-operations] Edge-case, zero-length DNSKEYs > Date: 7 October 2020 at 19:55:58 AEDT > To: [email protected] > > > I have contacted the DNS operator and they are working on it. > > -- > Marco > > Op 06-10-2020 om 19:33 schreef Viktor Dukhovni: > >> After an algorithm rollover (RSA 8 -> ECDSA P256 13) a couple of days >> backs, two domains now have new zero-length RSA 8 KSKs, along with >> working new ECDSA KSKs: > > > > _______________________________________________ > dns-operations mailing list > [email protected] > https://lists.dns-oarc.net/mailman/listinfo/dns-operations -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
