On Thu, 30 Sept 2021 at 14:34, vom513 <[email protected]> wrote: > > > So perhaps a dumb question - could Google and Cloudflare be hitting some kind > of “manual overrride” to not validate a given zone - i.e. human intervention > / look the other way ?
Negative Trust Anchors, most probably. It's standard operating procedure, particularly for the very large operators, to work around zones that are clearly broken and not actually being attacked to essentially turn off DNSSEC validation for those zones for some period of time. _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
