And now the DS records are fixed, so we flushed the cache. It appears Google Public DNS has done the same.
JL On 3/9/15, 10:18 PM, "Casey Deccio" <ca...@deccio.net<mailto:ca...@deccio.net>> wrote: On Mon, Mar 9, 2015 at 9:57 PM, Livingood, Jason <jason_living...@cable.comcast.com<mailto:jason_living...@cable.comcast.com>> wrote: Any DNS admins for HBO here? Your FQDN for order.hbonow.com<http://order.hbonow.com> looks a little messed up. http://dnsviz.net/d/order.hbonow.com/VP5DKQ/dnssec/ Looks like the DS records for hbonow.com<http://hbonow.com> have been pulled, so validation status will return to "insecure" (from "bogus") once the DS records clear the cache. http://dnsviz.net/d/order.hbonow.com/VP5RXw/dnssec/ Casey
