army.mil DNSSEC Outage: 2020-10-10

Date: October 10, 2020

Overview

This page gives some details on the army.mil DNSSEC outage on October 10, 2020.

Timeline / DNSViz

Since DNSViz has lots its archives multiple times, here's a 3rd party copy:

And here's a screenshot, just in case:

October 10, 2020 DNSSEC outage for army.mil

DNSSEC Debugger

Here's a screenshot of my web browser's output from October 10, 2020:

October 10, 2020 army.mil DNSSEC outage

Thanks to archive.is there's also a copy.

Zonemaster

Here are some Zonemaster archives of this outage.

drill trace

Since DNSSEC contains so much garbage, I put the complete drill trace into its own file, with the relevant portion below (emphasis added):

;; Domain: army.mil.
[B] army.mil. 19324 IN DNSKEY 256 3 8 ;{id = 41133 (zsk), size = 2048b}
army.mil. 19324 IN DNSKEY 256 3 8 ;{id = 49608 (zsk), size = 2048b}
army.mil. 19324 IN DNSKEY 257 3 8 ;{id = 62140 (ksk), size = 2048b}
army.mil. 19324 IN DNSKEY 256 3 8 ;{id = 61578 (zsk), size = 2048b}
army.mil. 19324 IN DNSKEY 257 3 8 ;{id = 30256 (ksk), size = 2048b}
[B] army.mil. 2168 IN A 147.241.58.6
;; Error: No keys with the keytag and algorithm from the RRSIG found
;;[S] self sig OK; [B] bogus; [T] trusted

Logfile examples

These logs come from different servers in different geographical regions: