On 2013-06-07, at 09:30, Corey Quinn <corey@sequestered.net> wrote:
Can not reproduce:
cquinn@quinntel ~ % dig +trace git.io 0 15951 06:29:33 Fri 06- 7-2013
As your trace demonstrated, git.io is not delegated, although the registry suggests it should be: [krill:~]% whois git.io Domain : git.io Status : Live Expiry : 2014-06-14 NS 1 : ns1.p16.dynect.net NS 2 : ns2.p16.dynect.net NS 3 : ns3.p16.dynect.net NS 4 : ns4.p16.dynect.net : GitHub : 548 4th St : San Francisco : . : US [krill:~]% Signatures in IO look ok (at least, the ones I looked for). Joe [krill:~]% drill -DT io soa ;; Number of trusted keys: 1 ;; Domain: . [T] . 172800 IN DNSKEY 256 3 8 ;{id = 20580 (zsk), size = 1024b} . 172800 IN DNSKEY 257 3 8 ;{id = 19036 (ksk), size = 2048b} Checking if signing key is trusted: New key: . 172800 IN DNSKEY 256 3 8 AwEAAc5byZvwmHUlCQt7WSeAr3OZ2ao4x0Yj/3UcbtFzQ0T67N7CpYmNqFmfvXxksS1/E+mtT0axFVDjiJjtklUsyqIm9ZlWGZKU3GZqI9Sfp1BjQkhi+yLa4m4y4z2N28rxWXsWHCY740PREnmUtgXRdthwABYaB2WPum3yRGxNCP1/ ;{id = 20580 (zsk), size = 1024b} Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAc5byZvwmHUlCQt7WSeAr3OZ2ao4x0Yj/3UcbtFzQ0T67N7CpYmNqFmfvXxksS1/E+mtT0axFVDjiJjtklUsyqIm9ZlWGZKU3GZqI9Sfp1BjQkhi+yLa4m4y4z2N28rxWXsWHCY740PREnmUtgXRdthwABYaB2WPum3yRGxNCP1/ ;{id = 20580 (zsk), size = 1024b} Key is now trusted! Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} [T] io. 86400 IN DS 13395 7 2 070bbe5be5a4be6271c543bde99e9981e5d4191740e531af2585c5d1619c83f0 io. 86400 IN DS 13395 7 1 c048489aec2420e18f5f423192f132106c3691c1 ;; Domain: io. [T] io. 604800 IN DNSKEY 256 3 7 ;{id = 6692 (zsk), size = 1024b} io. 604800 IN DNSKEY 257 3 7 ;{id = 13395 (ksk), size = 2048b} [T] io. 604800 IN SOA ns1.communitydns.net. nicadmin.nic.io. 1370610608 3600 1800 3600000 3600 ;;[S] self sig OK; [B] bogus; [T] trusted [krill:~]%