[Cerowrt-devel] more dnssec failures

[Dave Taht]

I will argue that a  better place to report  dnssec  validation
errors is the dnsmasq  list.

On Wed, Apr 23, 2014 at 8:31 AM, Aaron Wood <woody77 at gmail.com> wrote:
> Wed Apr 23 15:13:05 2014 daemon.info dnsmasq[29719]: query[A]
> e3191.dscc.akamaiedge.net.0.1.cn.akamaiedge.net from 172.30.42.99
> Wed Apr 23 15:13:05 2014 daemon.info dnsmasq[29719]: forwarded
> e3191.dscc.akamaiedge.net.0.1.cn.akamaiedge.net to 8.8.8.8
> Wed Apr 23 15:13:05 2014 daemon.info dnsmasq[29719]: dnssec-query[DS]
> e3191.dscc.akamaiedge.net.0.1.cn.akamaiedge.net to 8.8.8.8
> Wed Apr 23 15:13:05 2014 daemon.info dnsmasq[29719]: forwarded
> e3191.dscc.akamaiedge.net.0.1.cn.akamaiedge.net to 8.8.4.4
> Wed Apr 23 15:13:05 2014 daemon.info dnsmasq[29719]: forwarded
> e3191.dscc.akamaiedge.net.0.1.cn.akamaiedge.net to 8.8.8.8
> Wed Apr 23 15:13:05 2014 daemon.info dnsmasq[29719]: reply
> e3191.dscc.akamaiedge.net.0.1.cn.akamaiedge.net is BOGUS DS
> Wed Apr 23 15:13:05 2014 daemon.info dnsmasq[29719]: validation result is
> BOGUS
> Wed Apr 23 15:13:05 2014 daemon.info dnsmasq[29719]: reply
> e3191.dscc.akamaiedge.net.0.1.cn.akamaiedge.net is 2.20.28.186
>
> This one validates via verisign, however.
>
> -Aaron
>
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel at lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
>



-- 
Dave Täht

NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article