Barclays bank domain unresolvable only on some servers
Paul Kosinski
bind at iment.com
Sun Jun 16 15:38:59 UTC 2019
A *bank* not using DNSSEC?? Glad I don't have any money there.
On Sun, 16 Jun 2019 14:00:36 +0100 (BST)
"G.W. Haywood via bind-users" <bind-users at lists.isc.org> wrote:
> Hi there,
>
> On Sun, 16 Jun 2019, Mark Andrews wrote:
>
> > The servers for this zone are broken, they do not respond to
> > queries with DNS COOKIE options present. You can add server
> > options to named.conf to work around this while Barclays fix their
> > servers / firewalls. Modern recursive servers are no longer
> > working around broken servers that do not respond to queries. See
> > DNS flag day. It looks like Barclays ignored the messages.
>
> They have some history of ignoring messages:
>
> $ whois barclays.com | grep DNSSEC
> DNSSEC: unsigned
>
More information about the bind-users
mailing list