This timeout, I'm guessing this is older/naive setups that aren't expecting to support DNSSEC, and thought "over-securing" their setup, have managed to break the non-existence-proof process?

-Aaron

On Mon, Apr 28, 2014 at 9:32 PM, Simon Kelley <simon@thekelleys.org.uk> wrote:

...

Neither of authoritative nameservers for test-ipv6.com return answers to
the DS query, they just time out. They do return answers for A and AAAA
queries. That looks broken to me.

Problems like this have been at the root of most (but not all) of the
DNSSEC failures that have been reported.