[Dnsmasq-discuss] [Cerowrt-devel] Problems with DNSsec on Comcast, with Cero 3.10.38-1/DNSmasq 4-26-2014

[Aaron Wood]

This timeout, I'm guessing this is older/naive setups that aren't expecting
to support DNSSEC, and thought "over-securing" their setup, have managed to
break the non-existence-proof process?

-Aaron

On Mon, Apr 28, 2014 at 9:32 PM, Simon Kelley <simon at thekelleys.org.uk>wrote:

...

> Neither of authoritative nameservers for test-ipv6.com return answers to
> the DS query, they just time out. They do return answers for A and AAAA
> queries. That looks broken to me.
>
> Problems like this have been at the root of most (but not all) of the
> DNSSEC failures that have been reported.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20140428/7122486d/attachment-0001.html>