DNSKEY Missing no SEP matching the DS found for one.one.one.one

Zero Trust 1.1.1.1
1

What is the name of the domain?

one.one.one.one

Please include test result URL when you create a post in the community forum. Paste the results from → 1.1.1.1 — One of the Internet’s Fastest, Privacy-First DNS Resolver

What is the error message?

EDE: 9 (DNSKEY Missing): (no SEP matching the DS found for one.)

What is the issue you’re encountering

Some domains are not resolving when using cloudflare DNS

What steps have you taken to resolve the issue?

I’m using WARP connection.
https://1.1.1.1/help/ shows 503 Service Temporarily Unavailable error and https://one.one.one.one/help/ fails to resolve AAAA (although Firefox was able to connect via HTTPS RR ipv6hint).

$ dig one.one.one.one @1.1.1.1

; <<>> DiG 9.20.6 <<>> one.one.one.one @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 56514
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 9 (DNSKEY Missing): (no SEP matching the DS found for one.)
; EDE: 22 (No Reachable Authority): (at delegation one.)
;; QUESTION SECTION:
;one.one.one.one.               IN      A

;; Query time: 74 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)
;; WHEN: Wed Mar 05 11:39:07 +05 2025
;; MSG SIZE  rcvd: 111

$ dig one.one.one.one @8.8.8.8

; <<>> DiG 9.20.6 <<>> one.one.one.one @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16448
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;one.one.one.one.               IN      A

;; ANSWER SECTION:
one.one.one.one.        18347   IN      A       1.0.0.1
one.one.one.one.        18347   IN      A       1.1.1.1

;; Query time: 81 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Wed Mar 05 11:39:14 +05 2025
;; MSG SIZE  rcvd: 76

$ dig +short CHAOS TXT id.server @1.1.1.1
"ARN"

$ dig +short CHAOS TXT id.server @1.0.0.1
"ARN"

$ curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=one.one.one.one&type=AAAA'

{
  "Status": 2,
  "TC": false,
  "RD": true,
  "RA": true,
  "AD": false,
  "CD": false,
  "Question": [
    {
      "name": "one.one.one.one",
      "type": 28
    }
  ],
  "Comment": [
    "EDE(9): DNSKEY Missing no SEP matching the DS found for one.",
    "EDE(22): No Reachable Authority time limit exceeded"
  ]
}

I’m surprised that cloudflarestatus.com page shows Operational for Recursive DNS.

2

Hi,

Thanks for reporting the issue.

This was related to a recent incident, which is now resolved: Cloudflare Status - Increased 530 Errors in Stockholm

3

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.