This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/dns-wg@ripe.net/

[dns-wg] Bad secure delegation of ris.ripe.net

Previous message (by thread): [dns-wg] Bad secure delegation of ris.ripe.net
Next message (by thread): [dns-wg] AAAA records to be added for root servers

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Sjoerd Oostdijck sjoerdoo at ripe.net
Thu Dec 13 12:12:18 CET 2007

Alexander Gall wrote:
> Hello DISI
> 
> The zone ris.ripe.net is bogus.  It appears that the DS RR doesn't
> match the KSK DNSKEY RR.  ripe.net is fine (with the newest trust
> anchors).  According to drill:
> 
> 
Dear mr Gall and mailing list,

Due to human error on our side the DS records were not updated when
we introduced new keys 3 months ago. When we removed the old keys
yesterday the DS records stopped working. I fixed the DS records
this morning around 10:40 CET so things should be back up and working
as soon as the zone is reloaded on your nameserver or the TTL expires.

Kind regards,

-- 
Sjoerd Oostdijck -- DNS Services group
Ripe NCC         -- Singel 258 Amsterdam NL

Previous message (by thread): [dns-wg] Bad secure delegation of ris.ripe.net
Next message (by thread): [dns-wg] AAAA records to be added for root servers

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ dns-wg Archives ]