[Pdns-users] specfic problem with efax.com

[Otto Moerbeek]

On Thu, Jun 20, 2019 at 07:01:24AM -0700, Mike wrote:

> On 6/19/19 11:45 PM, Otto Moerbeek wrote:
> > Please always specify version and platform you are running.
> >
> > That said, both https://dnssec-analyzer.verisignlabs.com/efax.com and
> > https://dnssec-analyzer.verisignlabs.com/ report DNSSEc problems with
> > this domain.
> >
> 
> 
> Ugh, my bad for failing to post my software version, sorry I'll do that
> next time.
> 
> 
> I think you got it - the AA bit isn't set, so they are going to be
> failing lots of places. I noticed however that googledns didn't seem to
> have a problem with it. Wondering if this 'relaxed functionality' is
> just suicidal on google's part or perhaps a future enhancement possibility?

I was not completely accurate, the problem is not so much with DNSSEC
as with the general setup. The zonemeaster.net report shows more
problems with the domain. IMO the "Nameserver nsX.j2global.com
response is not authoritative" whould be a "red" condition.

	-Otto