Bug#600642: marked as done (Problem resolving debian.org with Comcast DNSSEC servers)
Your message dated Tue, 19 Oct 2010 00:33:14 +0200
with message-id <20101018223314.GA12651@glenfiddich.ikibiki.org>
and subject line Re: Bug#600642: Problem resolving debian.org with Comcast DNSSEC servers
has caused the Debian Bug report #600642,
regarding Problem resolving debian.org with Comcast DNSSEC servers
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
600642: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=600642
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: www.debian.org
Using Comcast’s DNSSEC testing resolvers (75.75.75.75, 75.75.76.76) [1], I
can’t resolve hosts in debian.org about half the time.
$ host security.debian.org 75.75.75.75
Using domain server:
Name: 75.75.75.75
Address: 75.75.75.75#53
Aliases:
Host security.debian.org not found: 3(NXDOMAIN)
This is worrying in light of today’s announcement of Comcast’s planned
migration of all customers to DNSSEC over the next few months; many Debian
users might find themselves unable to get security updates.
I don’t know whether this is Debian’s fault or Comcast’s, but Verisign’s
DNSSEC Debugger [3] does find a problem with the domain (“No DS records
found for debian.org in the org zone”).
[1] http://www.dnssec.comcast.net/
[2] http://blog.comcast.com/2010/10/DNS-Security-Rollout-Begins.html
[3] http://dnssec-debugger.verisignlabs.com/debian.org
--- End Message ---
--- Begin Message ---
Hi,
On Mon, Oct 18, 2010 at 04:11:03PM -0400, Anders Kaseorg wrote:
> Package: www.debian.org
Not related to www.debian.org but DNS, whose requests are not handled in the
bug tracking system (hence for reason for closing the bug).
Cc'ing debian-admin.
> Using Comcast’s DNSSEC testing resolvers (75.75.75.75, 75.75.76.76) [1], I
> can’t resolve hosts in debian.org about half the time.
>
> $ host security.debian.org 75.75.75.75
> Using domain server:
> Name: 75.75.75.75
> Address: 75.75.75.75#53
> Aliases:
>
> Host security.debian.org not found: 3(NXDOMAIN)
>
> This is worrying in light of today’s announcement of Comcast’s planned
> migration of all customers to DNSSEC over the next few months; many Debian
> users might find themselves unable to get security updates.
>
> I don’t know whether this is Debian’s fault or Comcast’s, but Verisign’s
> DNSSEC Debugger [3] does find a problem with the domain (“No DS records
> found for debian.org in the org zone”).
>
> [1] http://www.dnssec.comcast.net/
> [2] http://blog.comcast.com/2010/10/DNS-Security-Rollout-Begins.html
> [3] http://dnssec-debugger.verisignlabs.com/debian.org
Thanks for your report and best regards,
--
Simon Paillard
--- End Message ---
Reply to: