CNAME DNSSEC RRSIGs Missing

Website, Application, Performance DNS & Network
1

When resolving a cname for example test.example.com we are recieving a DNS SEC error that is only happening occasinally and only happens when using 1.1.1.1 the message from linux (dig) is as follows:

failed to verify signatures for example.com opt-out proof

Error 10 - RRSIGs Missing

This does not occur when using 8.8.8.8 as the resolver.

4

See Intermittent SERVFAILs: "failed to verify signatures for [DOMAIN]. opt-out proof" for more reports of this issue

1 Like
5

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.