Hi,It seems like this doesn't cause any problems in the real world, only in a test like the one on internet.nl. But as far as I can tell, it's not okay with RFC8020. And I tested some other nameservers (Google cloud DNS, Dyn.com and Yadifa happened to be easy to test for me) and I can confirm that they all do return "NOERROR" instead of "NXDOMAIN" if a sub-host exists.
The situation still seems to be the same in the upcoming PowerDNS 4.2 with MySQL backend (I didn't test other backends)
The only solution to this "problem" (or to get through the test...) I have found was to create any other record type on _domainkey (obviously not CNAME or NS, but any other record type should be okay).
Sincerely, Bart Mortelmans Op 15/04/19 om 12:37 schreef Steffan Noord:
Hello, I have setup DKIM for a long time.But resent someone point me to a site: https://en.internet.nl <https://en.internet.nl/>If i test one of my domains it says: Your domain does /not/ support DKIM records. If i use dig to test a domain like sidn.nl dig _domainkey.sidn.nl TXT Im getting a NOERROR If im using dig on one of my domains: dig _domainkey.heidewachter.nl TXT im getting a NXDOMAIN In the dns i have: default._domainkey.heidewachter.nl TXT v=DKIM1; t=s; p=MIICIjAN…… Any idees what is wrong? Met vriendelijke groet, Steffan Noord _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users
smime.p7s
Description: S/MIME-cryptografische ondertekening
_______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users