army.mil DNSSEC Outage: 2020-09-30

Updated: September 30, 2020

Overview

This page gives some details on the army.mil DNSSEC outage on September 30, 2020.

Timeline / DNSViz

Since DNSViz has lots its archives multiple times, here are some 3rd party copies:

And here's a screenshot, just in case:

September 30, 2020 DNSSEC outage for army.mil

DNSSEC Debugger

Here's a screenshot of my web browser's output from September 30, 2020:

September 30, 2020 army.mil DNSSEC outage

drill trace

Since DNSSEC contains so much garbage, I put the complete drill trace into its own file, with the relevant portion below (emphasis added):

;; Domain: army.mil.
[B] army.mil. 92528 IN DNSKEY 257 3 8 ;{id = 30256 (ksk), size = 2048b}
army.mil. 92528 IN DNSKEY 256 3 8 ;{id = 49608 (zsk), size = 2048b}
army.mil. 92528 IN DNSKEY 256 3 8 ;{id = 61578 (zsk), size = 2048b}
[B] army.mil. 2301 IN A 147.241.58.6
;; Error: No keys with the keytag and algorithm from the RRSIG found
;;[S] self sig OK; [B] bogus; [T] trusted

Logfile examples

These logs come from different servers in different geographical regions: