Re: [Pdns-users] DNSSEC Algorithm Rollover Documentation

2021-05-04 Thread Tony Finch via Pdns-users
Klaus Darilion wrote: > Daniel Stirnimann wrote: > > > > Tony Finch has also documented how to do an algorithm rollover, > > https://www.dns.cam.ac.uk/news/2020-01-15-rollover.html > > I am not sure - Is this the conservative or liberal approach? I would > think this is not conservative as the ne

Re: [Pdns-users] Recursor can't resolve login.authorize.net.cdn.cloudflare.net

2021-04-06 Thread Tony Finch via Pdns-users
Seth Mattinen via Pdns-users wrote: > > Here's a partial trace (list refused posting the full trace). From my eye it > looks like I'm just getting ServFail from cloudflare NS, or possibly a DNSSEC > validation problem. The SERVFAIL from the Cloudflare authoritative nameservers causes a DNSSEC val