psg.com DNSSEC Outage: 2020-11-02

Date: November 2, 2020

Overview

This page gives some details on the psg.com DNSSEC outage on November 2, 2020. This is an old Internet domain, registered in 1990, connected to Internet architects and provides DNS service for several TLDs.

Timeline / DNSViz

• 2020-11-02 00:10:45 UTC — Bogus DNSSEC delegation (copies: archive.is and archive.org)
• 2020-11-02 00:11:56 UTC — Bogus DNSSEC delegation (copies: archive.is and archive.org)
• 2020-11-02 00:16:08 UTC — Bogus DNSSEC delegation (copies: archive.is and archive.org)
• 2020-11-02 00:16:36 UTC — Bogus DNSSEC delegation (copies: archive.is and archive.org)

DNSSEC Debugger

Unlike DNSViz, Verisign's DNSSEC Debugger doesn't archive results, so here's a screenshot of my web browser's output from November 2, 2020:

Logfile examples

• [1604275865] unbound[265:0] info: validation failure <www.psg.com. A IN>: no keys have a DS with algorithm RSASHA256 from 147.28.0.39 for key psg.com. while building chain of trust
• [1604276194] unbound[265:0] info: validation failure <psg.com. A IN>: no keys have a DS with algorithm RSASHA256 from 147.28.0.39 for key psg.com. while building chain of trust
• [1604285215] unbound[265:0] info: validation failure <www.psg.com. A IN>: no keys have a DS with algorithm RSASHA256 from 147.28.0.62 for key psg.com. while building chain of trust
• [1604285619] unbound[265:0] info: validation failure <psg.com. A IN>: no keys have a DS with algorithm RSASHA256 from 147.28.0.62 for key psg.com. while building chain of trust
• [1604286335] unbound[265:0] info: validation failure <www.psg.com. A IN>: signatures from unknown keys for CNAME from 147.28.0.62 and 94.142.241.91
• [1604289624] unbound[265:0] info: validation failure <www.psg.com. NS IN>: signatures from unknown keys for CNAME from 147.28.0.62 and 94.142.241.91