2016-03-15に起きたAPNICの逆引きゾーンにおけるDNSSEC障害まとめ

4
Yasuhiro Morishita @OrangeMorishita

三重婚。 twitter.com/fj_twt/status/… twitter.com/OrangeMorishit… twitter.com/kun432/status/…

2016-03-18 02:02:50
Yu F @fj_twt

"Unfortunately, the check did not report any failure due to the fact that the resolver used cached responses." apnic.net/publications/n…

2016-03-17 19:30:56
Yasuhiro Morishita @OrangeMorishita

"Unfortunately, the check did not report any failure due to the fact that the resolver used cached responses." apnic.net/publications/n…

2016-03-17 22:38:56
kun432@VFJUG🇯🇵 @kun432

Unfortunately, the check did not report any failure due to the fact that the resolver used cached responses.

2016-03-17 23:24:14
Yasuhiro Morishita @OrangeMorishita

> ... has acquired an expired domain of a small but probably legitimate advertising company in order to utilize this for malicious purposes.

2016-03-18 02:35:21
Techmeme @Techmeme

Twitter to stop supporting standalone TweetDeck app for Windows on April 15 (@sarahintampa) techcrunch.com/2016/03/17/twi… techmeme.com/160317/p14#a16…

2016-03-18 02:46:35
(🍥) @hdais

親ゾーンのDSのTTLが1dで、子ゾーンのDNSKEYのTTLが 2dだと、今回のようにDSが間違ったものにすり替わった時に、cache+validatorで子がbogusになるまでの時間は最大2dなのか1dな のか。なんとなく最大2dのようなきがします。

2016-03-18 03:01:34
Yasuhiro Morishita @OrangeMorishita

信頼の連鎖をエンド側(深い方)からたどる実装が多そうだし、もしかするとそういうのもあるかも。 twitter.com/hdais/status/7…

2016-03-18 03:09:15