OT-ish: CSNNE down depending on your DNS configuration

[QuantumMechanic]

If your DNS server is doing DNSSEC validation you will not be able to reach CSNNE websites. The signatures on their zone (the RRSIG records) have expired and this causes validating DNS servers to refuse to resolve the CSNNE hostnames.

What you'll see as an end user is that the website won't load and you'll eventually get a "Could not resolve hostname" error in your browser.

I tweeted Curran (only CSNNE person I follow) and he actually passed it to IT and I got a tweet from the CSNNE main account saying they are looking into it.

 

[QuantumMechanic]

And they've fixed it.

 

[resdubwhite]

Probably just a zone refresh. Can sometimes take 24 hours

 

[QuantumMechanic]

Probably just a zone refresh. Can sometimes take 24 hours

No, they really had a problem. The RRSIGs expired 9 days ago and they had no clue so they had been offline for anyone using DNSSEC all that time.

I ended up in a twitter direct message (i.e. private) conversation last night with some "director of digital assets". After some questions I gave them some log extracts plus pointed them at some online DNSSEC checkers and the light finally went on for them and about a half-hour later (most of which I imagine was zone refresh time) the RRSIGs were updated and things were OK.

 

[Clonamery]

Can you do something about the Russian Hackers and Wikileaks?