mbix.ca DNSSEC outage – now resolved

It was recently brought to our attention that mbix.ca was failing to resolve for anyone using Google Public DNS.  The response to queries was a servfail, indicating a technical failure in name resolution.  However, this problem would have been visible on any DNSSEC-validating resolver, which would not return results, after finding the signature expired for all mbix.ca records.  The solution was to re-sign the zone. Longer-term, the solution will be to resign the zone automatically. We plan to implement that real soon.

Leave a Reply

You can use these HTML tags

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>