dotse/dnscheck — Issue #43: Broken DNSSEC only detected as warnings
Author: cederlys
Created: 2011-10-12 08:42:43+00:00
State: open

The DNSSEC signatures of ryttargardskyrkan.se expired 2011-10-10
01:07 UTC. This caused broadband customers of at least Tre,
Telia and Tele2 to be unable to resolve www.ryttargardskyrkan.se.

When I found out there were issues, I immediately asked
dnscheck.iis.se to check the domain. It found a few warnings,
but nothing that looked serious to me. I was not aware that
DNSSEC was activated, so I ignored the warnings under the DNSSEC
heading; they didn't look fatal to my untrained eyes.

Late at night 2011-10-11 I finally realized that DNSSEC might be a
real issue. I disabled it for the domain, and a few hours later
(around 2011-10-11 23:40) everything started to work again.

It would have been helpful if dnscheck had flagged this as an
error.