.mg TLD DNSSEC Outage: 2017-02-16
Updated: February 16, 2017
Overview
This page gives some details on the .mg (Madagascar) TLD DNSSEC outage on February 5, 2017.
Timeline / DNSViz
- 2017-02-16 19:57:23 UTC — RRSIG inception date in future
- 2017-02-16 21:17:41 UTC — Bogus SOA
DNSSEC Debugger
Unlike DNSViz, Verisign's DNSSEC Debugger doesn't archive results, so here's a screenshot of my web browser's output from February 16, 2017:
Zonemaster
Please note: Zonemaster has lost most of its archives, including the following. DNSSEC makes its users comfortable with downtime and failure.
- zonemaster.net archived "Delegation from parent to child is not properly signed (signature: DNSSEC signature not incepted yet)."
- zonemaster.fr archived "Delegation from parent to child is not properly signed (signature: DNSSEC signature not incepted yet)."
DNSCheck
Please note: DNSCheck has lost most of its archives, including the following. DNSSEC makes its users comfortable with downtime and failure.
- dnscheck.labs.nic.cz archived "The zone mg has published DS records, but none of them work" (requires javascript).
- dnscheck.iis.se archived a bogus SOA (requires javascript).
Logfile examples
- [1487275027] unbound[24674:0] info: validation failure <mg. NS IN>: signature before inception date from 91.203.32.147 for key mg. while building chain of trust
- [1487276872] unbound[24674:0] info: validation failure <mg. NS IN>: signature before inception date from 199.19.5.24 for key mg. while building chain of trust