News for hackers. Stuff that matters.

A comment on Review of the .nz DNSSEC Chain Validation Incident on 29-30 May 2023 [pdf]. Parent comment

Re:Review of the .nz DNSSEC Chain Validation Incident on 29-... by jeroenhd on Monday October 09, 2023 @06:16AM (#37818822)
I think that is the core issue. I do wonder why this TTL is determined by a config file and not a direct TTL query to the root servers. A mismatch between the two should at least provide a warning, I would think?
[ Parent | on HN ]
Re:Review of the .nz DNSSEC Chain Validation Incident on 29-... by mcesch on Monday October 09, 2023 @04:10PM (#37824869)
OpenDNSSEC's first release was before the root was signed so perhaps there's some assumptions in it that need revisiting.
[ Parent | on HN ]