1 Oct
2007
1 Oct
'07
10:04 a.m.
Jaap Akkerhuis wrote on 28-09-2007 12:08:
this domain is signed, ALL servers respond with DNSSEC data EXCEPT the RIPE server which do not support DNSSEC....
so if you resolve domains from 8.4.e164.arpa zone using RIPE server, you can't get DNSSEC enabled answers.
we will remove ns.ripe.net and the problem will be solved today.
Ah, I might have hit that one, I just only tried it once. But there is at least one lesson in this: you make sure al servers support DNSSEC when you roll it out.
We are tracking down the problem together with NASK; as far as we can see ns.ripe.net returns the right dnssec information.
jaap
Andrei Robachevsky CTO, RIPE NCC