.de TLD offline due to DNSSEC

Comments

• stable_genius Member

  May 5

  This is terrible, I'll lose millions per minute because of this. Oh wait.. I don't have any .de domains.

  Phew... that was close. Thank God I did not buy any .de domains.

  Thanked by 5totally_not_banned Hayzee forest jendeuk Nekopara
• Nyr Community Contributor, Veteran

  May 5

  dupe
• NotFoundException Member

  May 5

  @Nyr said:
  dupe

  Nope, your dupe is the dupe

  Thanked by 6stable_genius tentor whynotlearn beanman109 webcraft forest
• Nyr Community Contributor, Veteran

  May 5

  @NotFoundException said: Nope, your dupe is the dupe

  Indeed, should've read the time.

  Thanked by 2whynotlearn webcraft
• zed Member

  May 5

  proof that dnssec is bad.
• brueggus Member, IPv6 Advocate

  May 5

  @zed said:
  proof that dnssec is bad.

  

  Thanked by 2tentor zejjnt
• totally_not_banned Member

  May 5

  Well, i don't like dnssec either.

  Thanked by 1jsg
• beanman109 Member, Host Rep, Megathread Squad

  May 5

  i use dnssex for some domains but i still dont even know what it does

  Thanked by 2Void sillycat
• totally_not_banned Member

  May 5

  @beanman109 said:
  i still dont even know what it does

  Pretty much this and it pisses me off.

  Thanked by 1beanman109
• whynotlearn Member

  May 5

  @Nyr said:
  dupe

  Its actually the opposite but no worries I think :-D
• zed Member

  May 6 edited May 6

  hey no worries cloudflare is on it https://www.cloudflarestatus.com/incidents/vjrk8c8w37lz

  can't wait for the blog

  https://ianix.com/pub/dnssec-outages.html

  "Terminology note: The coveted 1000-day DNSSEC outage is known as a kiloday."
• jsg Member, Resident Benchmarker

  May 6

  I hate to say it, but Kudos to CF for

  CF said:
  Cloudflare has temporarily disabled DNSSEC validation for .de domains on 1.1.1.1 resolver (as per RFC 7646) in order to allow .DE names to continue to resolve.

  But of bloody course billions of domain tampering and other evil cases will come up now!!! * shriek

  The RFC mentioned indicates that at least some modicum of reason was left when going DNSSEC.

  My .de domain (the only one left since I made a hard turn away from denic) of course is not DNSSEC infested.

  Thanked by 1totally_not_banned
• zed Member

  May 6

  @jsg said:
  I hate to say it, but Kudos to CF for

  CF said:
  Cloudflare has temporarily disabled DNSSEC validation for .de domains on 1.1.1.1 resolver (as per RFC 7646) in order to allow .DE names to continue to resolve.

  But of bloody course billions of domain tampering and other evil cases will come up now!!! * shriek

  The RFC mentioned indicates that at least some modicum of reason was left when going DNSSEC.

  My .de domain (the only one left since I made a hard turn away from denic) of course is not DNSSEC infested.

  Purists will shriek about tampering etc for sure but imo this illustrates why dnssec is theater anyway. The #2(?) public resolver just flipped it off for reasons oh well.

  Thanked by 2jsg totally_not_banned
• jsg Member, Resident Benchmarker

  May 6

  @zed said:

  @jsg said:
  I hate to say it, but Kudos to CF for

  CF said:
  Cloudflare has temporarily disabled DNSSEC validation for .de domains on 1.1.1.1 resolver (as per RFC 7646) in order to allow .DE names to continue to resolve.

  But of bloody course billions of domain tampering and other evil cases will come up now!!! * shriek

  The RFC mentioned indicates that at least some modicum of reason was left when going DNSSEC.

  My .de domain (the only one left since I made a hard turn away from denic) of course is not DNSSEC infested.

  Purists will shriek about tampering etc for sure but imo this illustrates why dnssec is theater anyway. The #2(?) public resolver just flipped it off for reasons oh well.

  Guess why I didn't join the DNSSAK cult ...

  Thanked by 1rpqu
• Void Member

  May 6 edited May 6

  Dnssuc

  Thanked by 1rpqu