.mg TLD partial DNSSEC Outage: 2017-02-05

Updated: February 5, 2017

Overview

This page gives some details on the partial .mg (Madagascar) TLD DNSSEC outage on February 5, 2017. This particular outage was limited to failing NXDOMAIN responses; in this case, the NSEC records were bogus.

Timeline / DNSViz

2017-02-05 06:47:53 UTC — expired NSEC RRSIG

DNSSEC Debugger

Unlike DNSViz, Verisign's DNSSEC Debugger doesn't archive results, so here's a screenshot of my web browser's output from February 5, 2017:

February 5, 2017 .mg TLD partial DNSSEC outage

Logfile example

[1486277266] unbound[99546:0] info: validation failure <dnssec.mg. A IN>: signature expired from 196.192.42.153 for <dnepm.mg. NSEC IN>