News for hackers. Stuff that matters.

A comment on Ask HN: Cloudflare broke my domain's DNSSEC making it unreachable since 4 days. Parent comment

Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr... by medguru on Tuesday May 17, 2022 @09:41AM (#31410459)
CF's authorative servers ("hasslo" and "crystal") respond correctly when queried directly, but that doesn't really help the situation.
[ Parent | on HN ]
Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr... by phillipseamore on Tuesday May 17, 2022 @10:09AM (#31410903)
Then it sounds like you are caught in cache limbo. It might be prudent for CF to have their DNSSEC setup so that users can't disable it instantly (or enable again instantly) and have a minimum of 12/24/48h between changing DNSSEC state. I'd guess that by now most caching DNS resolvers might have different signatures (old registrar, first CF DNSSEC and second CF DNSSC).
[ Parent | on HN ]