Moin! On 30 May 2022, at 9:34, Matt Nordhoff wrote: > The domain was always resolvable from a cold cache because the > delegation was always* correct. > > <https://dnsviz.net/d/dynect.net/YpA8MQ/dnssec/> > > The outage happened when the authoritative NS records were changed to > *completely different* names that do not exist. A that makes sense now. My understanding was that the delegation had changed.
> A totally parent-centric resolver would never have noticed anything wrong. Yes, which is why I like them :-). So long -Ralf ——- Ralf Weber _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
