MTU woes and the merits of re-signing

Written by Roland van Rijswijk in category: General, Procedures

Two stories to learn from today… MTU woes I got some news last week that initially got me worried; several colleagues were experiencing DNS problems at home since our secure delegation had been made active (or so it seemed). They had big problems resolving names under the surfnet.nl domain. We mounted an investigation and it […]

No Comments

Thank you SIDN!

Written by Roland van Rijswijk in category: Uncategorized

For the tasty pie sent to us to celebrate surfnet.nl as first domain in the DNSSEC Friends & Fans programme!

No Comments

Now validatable: surfnet.nl

Written by Roland van Rijswijk in category: General

Just to let you all know: surfnet.nl is now fully validatable for the first time! A secure delegation has been added to the .nl zone which in turn now has a secure delegation in the root zone! Look at the dig statement below: the answer now has the ‘AD’ bit set to indicate that the […]

No Comments

And the winner is…

Written by admin in category: Uncategorized

Hugo Salgado from Chile managed to come up with a plausible solution: the spike is due to both DLV and the root trust anchor being used concurrently. I consulted NLnet Labs to confirm this theory and they answered the following: “DLV lookups are done using recursion. So if a TLD is in DLV (and has […]

1 Comments