dnssec-analyzer.verisignlabs.com aaaa lookup fail

[Walter H.]

# host dnssec-analyzer.verisignlabs.com
dnssec-analyzer.verisignlabs.com is an alias for 
dnssec-analyzer-gslb.verisignlabs.com.
dnssec-analyzer-gslb.verisignlabs.com has address 209.131.158.42


On 27.04.2024 01:35, Lee wrote:
> dig dnssec-analyzer.verisignlabs.com aaaa
>
> gives me a SERVFAIL & this in the bind errors_log file:
>
> $ grep dnssec-analyzer.verisignlabs.com named-errors.log | tail -1
> 26-Apr-2024 19:28:37.600 query-errors: info: client @0x7f384488e3c0
> 127.0.0.1#47121 (dnssec-analyzer.verisignlabs.com): query failed
> (failure) for dnssec-analyzer.verisignlabs.com/IN/AAAA at query.c:7471
>
>
> Is that because of the insecure delegation shown at
>    https://dnsviz.net/d/dnssec-analyzer.verisignlabs.com/dnssec/
> and me having "dnssec-validation auto;" in named.conf?
>
> Thanks
> Lee
>
> (still struggling to understand this stuff)



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3550 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20240427/a51f436a/attachment.p7s>