[AusNOG] Vodafone/myvodafone DNSSEC Broken

Reuben Farrelly reuben-ausnog at reub.net
Wed Sep 4 18:56:15 EST 2019


Hi,

Can someone who manages the vodafone.com.au/myvodafone.com.au DNS please 
take a look what appears to be broken dnssec on this domain?

It's currently not working:

named[26893]: dnssec: validating myaccount.myvodafone.com.au/CNAME: bad 
cache hit (myvodafone.com.au/DNSKEY)

It periodically seems to fail with this same error.  This isn't the 
first time - with a bit of patience it comes right for a while before it 
breaks again.

https://dnssec-analyzer.verisignlabs.com/myaccount.myvodafone.com.au

and

http://dnsviz.net/d/myaccount.myvodafone.com.au/dnssec/

both indicate that things with this and some other subdomains are not happy.

Hopefully the "fix" doesn't involve disabling DNSSEC altogether.

Thanks,
Reuben


More information about the AusNOG mailing list