bugZoneCheck - Bugs: bug #31332, DNSSEC name servers which do not...

 
 

bug #31332: DNSSEC name servers which do not provide NSEC3 are not detected

Submitter:  Stephane Bortzmeyer <bortzmeyer>
Submitted:  Thu 14 Oct 2010 06:34:59 PM UTC
   
 
Category:  * tests Severity:  Ordinary
Priority:  5 - Normal Item Group:  * Feature request
Status:  Confirmed Privacy:  Public
Assigned to:  None Open/Closed:  Open
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 14 Oct 2010 06:34:59 PM UTC, original submission:  

As of today, the TLD .museum is broken: two of its authoritative name servers do not send back NSEC3 records when either the name or the type does not exist (probably because they are old BIND).

Zonecheck does not detect the problem and says the domain is OK. That's probably because it tests only with existing names and types. May be a query for an very rare QTYTE to test?

Stephane Bortzmeyer <bortzmeyer>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by bortzmeyer (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    No changes have been made to this item

    Back to the top

    Powered by Savane 3.13-d3ae.
    Corresponding source code