slack.com DNSSEC Outage: 2021-09-30

Date: September 30, 2021

Overview

This page gives some details on the slack.com partial DNSSEC outage on September 30, 2021.

dns-operations

outages list

NANOG

status.slack.com

Twitter

The outage was discussed on Twitter. Among other tweets:

"If I'm reading this right, Slack's DNS admins may have caused a sitewide outage; they apparently enabled DNSSEC (DS + keys), then disabled (pulling DS + keys), but the DS is cached and DNSSEC-aware resolvers freak out when they can't find the keys."Thomas H. Ptacek (@tqbf)

slack.com dnssec outage september 30, 2021

"Slack tried to enable DNSSEC, and then tried to revert, taking their zone down. lists.dns-oarc.net/pipermail/dns-... This one is fixable! Use a resolver that doesn't break for DNSSEC! 9.9.9.10 is a good one. It also comes in DoH!"Filippo Valsorda (@FiloSottile)

slack.com dnssec outage september 30, 2021