Speaker
Petr Špaček
(Internet Systems Consortium (ISC))
Description
Some DNS authoritative servers provide incorrect proofs of non-existence which correctly DNSSEC-validate but deny existence of data which actually do exist in the zone. Consequently, this causes silent resolution failures on resolvers which implement aggressive use of DNSSEC-validated cache (RFC 8198).
This talk aims to provide very short glimpse to where the breakage can be found in wild on the Internet.
Primary author
Petr Špaček
(Internet Systems Consortium (ISC))
