On 4/19/20 6:49 PM, Viktor Dukhovni wrote: >>> I believe that's normal for CloudFlare authoritatives, and so far I've >>> noticed no real problems from that, apart from effects like less >>> efficient caching. Description: >>> https://blog.cloudflare.com/black-lies/#dnsshotgun > It can't be "normal", because the auth servers ServFail when I request > the promised TLSA RRs.
I only meant that those NSECs are normal (for them), not the ServFails or timeouts which they most likely have to debug themselves.
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
