Comcast subscribers around Wash D.C. are unable to resolve aerhq.org. Subscribers of other ISPs resolve site. Anyone else seeing something like this? Thanks, Tom Elliott
Well, this domain has a broken DNSSEC setup: http://dnsviz.net/d/aerhq.org/dnssec/ Every recursive DNS server that validates DNSSEC (except for Google Public DNS, as stated here[1]) will not resolve this domain. César [1] https://developers.google.com/speed/public-dns/faq#gdns_validation_failure On Wed, Jul 12, 2017 at 6:37 PM, Tom Elliott via Outages < outages@outages.org> wrote:
Comcast subscribers around Wash D.C. are unable to resolve aerhq.org. Subscribers of other ISPs resolve site. Anyone else seeing something like this?
Thanks,
Tom Elliott
_______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
On 7/12/17 2:37 PM, Tom Elliott via Outages wrote:
Comcast subscribers around Wash D.C. are unable to resolve aerhq.org. Subscribers of other ISPs resolve site. Anyone else seeing something like this?
Yes. aerhq.org has broken their DNSSEC. The DS record points to a nonexistent DNSKEY in the aerhq.org zone. michael
participants (3)
-
César de Tassis Filho -
Michael Sinatra -
Tom Elliott