--- Begin Message ---
Imperva/Incapsula which hosts a web application firewall (WAF) with many
customers having a CNAME configured towards a record in their domain,
incapdns.net. Incapsula had very recently DNSSEC configured on this
zone; but last night the RRSIG on the DNSKEY record has expired; leaving
every website behind incapdns.net unreachable for users of a validating
DNS resolver. As a quick solution, Incapsula has removed the DS record
from the parent zone, .net. But, this record is still in many DNS
caches (TTL=1 day).
Therefore, the question if it is possible for validating resolver
maintainers to clear the cache of this DS record for the domain
incapdns.net.
Thanks
--
*Sven Van Dyck*
*System Engineer*
+32 16 28 49 74
*www.dnsbelgium.be* <http://www.dnsbelgium.be/>
--- End Message ---
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
