Comment by 1vuio0pswjnm7
15 hours ago
.de TLD is online. DNS working fine
DNSSEC not working
If using an open resolver, i.e., a shared DNS cache, e.g., third party DNS service such as Google, Cloudflare, etc., then it might fail, or it might not. It depends on the third party DNS provider
https://datatracker.ietf.org/meeting/118/materials/slides-11...
To me, "root DNS servers" means 198.41.0.4, etc.
The names and IP addresses in the responses from those servers were not "wrong". DNSSEC data might have been "wrong" at the time but that has no effect on people not "enforcing" DNSSEC (I dont rely on it, for example)
The story being told is that some, not all, of the .de nameservers were serving incomplete .de zone files
DNS worked fine. The responses that the root DNS servers were sending were wrong.
It's the cryptographic version of that one time the same TLD told the world domains starting with certain letters didn't exist: https://www.theregister.com/2010/05/12/germany_top_level_dom...