bugZoneCheck - Bugs: bug #31332, DNSSEC name servers which do not...

 
 

bug #31332: DNSSEC name servers which do not provide NSEC3 are not detected

Submitted by:  Stephane Bortzmeyer <bortzmeyer>
Submitted on:  Thu 14 Oct 2010 06:34:59 PM UTC  
 
Category: testsSeverity: Ordinary
Priority: 5 - NormalItem Group: Feature request
Status: ConfirmedPrivacy: Public
Assigned to: NoneOpen/Closed: Open

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Thu 14 Oct 2010 06:34:59 PM UTC, original submission:

As of today, the TLD .museum is broken: two of its authoritative name servers do not send back NSEC3 records when either the name or the type does not exist (probably because they are old BIND).

Zonecheck does not detect the problem and says the domain is OK. That's probably because it tests only with existing names and types. May be a query for an very rare QTYTE to test?

Stephane Bortzmeyer <bortzmeyer>
Project Administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by bortzmeyer (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    No Changes Have Been Made to This Item

    Back to the top


    Powered by Savane 3.1-cleanup1