bugZoneCheck - Bugs: bug #31332, DNSSEC name servers which do not...

 
 

bug #31332: DNSSEC name servers which do not provide NSEC3 are not detected

Submitter:  Stephane Bortzmeyer <bortzmeyer>
Submitted:  Thu 14 Oct 2010 06:34:59 PM UTC
   
 
Category:  * tests Severity:  Ordinary
Priority:  5 - Normal Item Group:  * Feature request
Status:  Confirmed Privacy:  Public
Assigned to:  None Open/Closed:  Open
* Mandatory Fields

Post a Comment

Add a New Comment Rich Markup
   

Discussion

Thu 14 Oct 2010 06:34:59 PM UTC, original submission:  

As of today, the TLD .museum is broken: two of its authoritative name servers do not send back NSEC3 records when either the name or the type does not exist (probably because they are old BIND).

Zonecheck does not detect the problem and says the domain is OK. That's probably because it tests only with existing names and types. May be a query for an very rare QTYTE to test?

Stephane Bortzmeyer <bortzmeyer>
Group administrator

 

Attached Files

This item currently has no attached files.

(Note: upload size limit is set to 4.0MiB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

 

Dependencies

This item does not depend on any other items.

No items depend on this one.

 

Mail Notification Carbon-Copy List

Carbon-Copy List
  • -email is unavailable- added by bortzmeyer (Submitted the item)
  •  

    Votes

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

    History

    No changes have been made to this item

    Back to the top

    Powered by Savane 3.16-598c.
    Corresponding source code