Is it me or does no longer validate?

Joe Abley jabley at
Wed Jan 23 15:03:53 UTC 2019

On 23 Jan 2019, at 05:20, Havard Eidnes via Unbound-users <unbound-users at> wrote:

> Clearly, we're past 2019.01.13 by now.
> I'm however surprised their DNSSEC signature renewal doesn't
> appear to have been fully automated.

I wouldn't draw too many conclusions about back-end architecture when systems like this might well be being looked after by a stressed, skeleton crew as a result of the US federal government shutdown. Even automated systems fail from time to time. High-availability systems fail more than most, seems to me :-)

All the best to federal DNS ops people who are in a bad situation right now, for what that's worth. People have been sending pizza to US air traffic control facilities over the past month as high-calorie expressions of support. Maybe we need to find a way to order pizza for DNSSEC systems staff, too. I'd send them some RRSIGs, but that's not how that works.


More information about the Unbound-users mailing list