From: Bob Proulx via rockbox <rockbox_at_cool.haxx.se>
Date: Fri, 18 Dec 2020 18:48:54 -0700

Solomon Peachy wrote:
> Bob Proulx via rockbox wrote:
> > The previous behavior you describe "feels" to me like a problem
> > validating DNSSEC. I am a little out of my depth for DNSSEC.
>
> rockbox.org's DNS does not utilize DNSSEC.

But the rockbox.org nameservers do.

    rwp_at_angst:~$ dig rockbox.org ns +short
    ns1.haxx.se.
    ns.amplitut.de.

When I trace those the results look very much like they are using
DNSSEC. And if the resolver can't validate the nameservers then they
will fail to return a result.

But as I said I am not deeply versed with DNSSEC operations. I just
said it felt like that was a problem. But if you don't think that is
related then I won't mention it again.

Bob

rwp_at_angst:~$ dig ns1.haxx.se a +trace

; <<>> DiG 9.10.3-P4-Debian <<>> ns1.haxx.se a +trace
;; global options: +cmd
. 3600000 IN NS L.ROOT-SERVERS.NET.
. 3600000 IN NS F.ROOT-SERVERS.NET.
. 3600000 IN NS K.ROOT-SERVERS.NET.
. 3600000 IN NS H.ROOT-SERVERS.NET.
. 3600000 IN NS G.ROOT-SERVERS.NET.
. 3600000 IN NS A.ROOT-SERVERS.NET.
. 3600000 IN NS J.ROOT-SERVERS.NET.
. 3600000 IN NS B.ROOT-SERVERS.NET.
. 3600000 IN NS M.ROOT-SERVERS.NET.
. 3600000 IN NS I.ROOT-SERVERS.NET.
. 3600000 IN NS D.ROOT-SERVERS.NET.
. 3600000 IN NS C.ROOT-SERVERS.NET.
. 3600000 IN NS E.ROOT-SERVERS.NET.
;; Received 853 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms

se. 172800 IN NS a.ns.se.
se. 172800 IN NS b.ns.se.
se. 172800 IN NS c.ns.se.
se. 172800 IN NS f.ns.se.
se. 172800 IN NS g.ns.se.
se. 172800 IN NS i.ns.se.
se. 172800 IN NS m.ns.se.
se. 172800 IN NS x.ns.se.
se. 172800 IN NS y.ns.se.
se. 172800 IN NS z.ns.se.
se. 86400 IN DS 59407 8 2 67A8E06FCEFDD9397F77F26C41ADE4EC142F299BCFA1827F0EF8FD87 F2F63022
se. 86400 IN RRSIG DS 8 1 86400 20201231170000 20201218160000 26116 . f2uF+uEHRVzaJTP9Js2yg4SC5OWUlLJ4nBIPhgexxHfI+EJ49Yl7N3Rs H+cbCmX9nLr3UE1RSKWwCzyVozWCiCCf65o9UxEOzbJGqdB+TFxNdxvO Y2+DkCNVe3UXFYg3XCySsl2csIh7xWNrxpMJvf4UXuj9fBcYXvsBcvey N5VFuHBrUccbx6Ibs8iOgJnZVQ07Fj0rVC+AbzPo/3rGOx9CTS1gsk/f cF6x2QRuPY5QuPIUi6q3Z6q/be4Ec7avvxKw2ODGb7y0dVosQLIT9ce/ ICQdMFoR4u2lTIxrFjG0YSLMkT4zAKtN0pK9qOw9ISBEVREZjOu5Jb11 EMk+yA==
;; Received 978 bytes from 198.97.190.53#53(H.ROOT-SERVERS.NET) in 48 ms

haxx.se. 86400 IN NS ns1.haxx.se.
haxx.se. 86400 IN NS ns.amplitut.de.
haxx.se. 7200 IN NSEC haxxa.se. NS RRSIG NSEC
haxx.se. 7200 IN RRSIG NSEC 8 2 7200 20201230020427 20201216171101 24331 se. FiWFl9MO0wO8KmXQLL1MUhdCPNiOXdmX9zOv4zSfEASNuxTBYgypiUdK ZOWXuPp7rEFCQcFqNYPOWFIPFjnPBaCd2+c9se/wENPxNMRKy19xt0qC 7y3ZJ4LMA96fEqxkA56sx+6PYGd2iAgA+vJh0fWZB+UPZ9IZUlArY7Je LkOv0iqXg3Tol6ThZjffwzIRx1jUctlgF74Ym5eABDq7nn3wDb2cvFQM NEgYvi8F90iDjUjklu23KkqPYxPyxC2IiLp5f4lFdLeq8+jm7/v5rWrw LMGBLcfiJzHJzU1VlKWRylGgUcLvyX73Xm9B5KVSKaQ+fCfGuGfd0ek5 ti5fqQ==
;; Received 446 bytes from 185.159.197.150#53(y.ns.se) in 49 ms

ns1.haxx.se. 3600 IN A 159.253.31.95
haxx.se. 3600 IN NS ns.amplitut.de.
haxx.se. 3600 IN NS ns1.haxx.se.
;; Received 126 bytes from 192.195.142.21#53(ns.amplitut.de) in 141 ms


rwp_at_angst:~$ dig ns.amplitut.de a +trace

; <<>> DiG 9.10.3-P4-Debian <<>> ns.amplitut.de a +trace
;; global options: +cmd
. 3600000 IN NS G.ROOT-SERVERS.NET.
. 3600000 IN NS J.ROOT-SERVERS.NET.
. 3600000 IN NS C.ROOT-SERVERS.NET.
. 3600000 IN NS I.ROOT-SERVERS.NET.
. 3600000 IN NS K.ROOT-SERVERS.NET.
. 3600000 IN NS A.ROOT-SERVERS.NET.
. 3600000 IN NS L.ROOT-SERVERS.NET.
. 3600000 IN NS E.ROOT-SERVERS.NET.
. 3600000 IN NS H.ROOT-SERVERS.NET.
. 3600000 IN NS D.ROOT-SERVERS.NET.
. 3600000 IN NS F.ROOT-SERVERS.NET.
. 3600000 IN NS M.ROOT-SERVERS.NET.
. 3600000 IN NS B.ROOT-SERVERS.NET.
;; Received 853 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms

de. 172800 IN NS a.nic.de.
de. 172800 IN NS f.nic.de.
de. 172800 IN NS l.de.net.
de. 172800 IN NS n.de.net.
de. 172800 IN NS s.de.net.
de. 172800 IN NS z.nic.de.
de. 86400 IN DS 45580 8 2 918C32E2F12211766BE6226674F447458F2259B9A0D87B44D29D55AF ECA6B2E1
de. 86400 IN RRSIG DS 8 1 86400 20201231170000 20201218160000 26116 . FFDnRrVRecd+3hpyYTeiPJeckvmy+aC7tqKwLjoLA6sjg1Jt5rX2wege dM8QyJSI/BLOOY5Hv18ewwgcSwopoRNEUaiTom8COl2xjoUhZ0i8y0nJ 9s7cKS0p6F+TEDZyFqWuJe6ooVyMGV059fVhc39OXMV3Sc8Vh4dO+yhS vmVL15uDsC7IrJfX84n6CxyhwqBZ+N64qjqtdSN7PNeJ+SLSfMVjYDlF D+ei7Jg2cNuBntt4m4J9tJPG4CbzUWYxWLKNlcS3nZ6jxMu/qE8Pi6er RbdfK3XJrdUYoBeAbiZWU9JUJX3YCHspLEjsSoemZhPlBznVmD6EMFoI IzsODA==
;; Received 754 bytes from 199.9.14.201#53(B.ROOT-SERVERS.NET) in 49 ms

amplitut.de. 86400 IN NS ns.amplitut.de.
amplitut.de. 86400 IN NS boa.amplitut.de.
amplitut.de. 86400 IN NS ns1.d-zone.ca.
amplitut.de. 86400 IN NS ns2.d-zone.ca.
tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 1 1 15 CA12B74ADB90591A TJLLOA0837KMNOQJ9GQ3G9JAB9FRQRLN NS SOA RRSIG DNSKEY NSEC3PARAM
tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG NSEC3 8 2 7200 20201231041728 20201217024728 5730 de. mZ8YFidiy97BvfX4GBPnLcJRfaa1RGe4gtw3NibUl+Z0bR35a42L7N6t /TUEyKkAjNfG/M8MhlyXsUwAqYMF87pVe+H3qYWSBAAimewZiOBjHox3 4VbJha87+bcOgVpSZcHChmWLJIEznF+CILOrwmMH4qLkVa3teUB+zWmm A3A=
6040fmadc74k5a1liph61s51rqlt530a.de. 7200 IN NSEC3 1 1 15 CA12B74ADB90591A 6041R6D2AQ8K08ROH55VFISBDKQ7PGS4 A RRSIG
6040fmadc74k5a1liph61s51rqlt530a.de. 7200 IN RRSIG NSEC3 8 2 7200 20201231041728 20201217024728 5730 de. nTiuzpNtksZgNYMDsVUKOm5ey84R763gB2sCnkS99V2gsKcZeZPlM/pG daMIXK1felg+JsVCtNW9Zr4GEEf+Og54pRWkJud2VzPjs44oI11TUL7V OYt2BYGeij87ZOhqgwzCkP/EcJEdqzyPNT/a+ojPAO5uU0Txxyyk4CSN N+c=
;; Received 679 bytes from 194.146.107.6#53(n.de.net) in 54 ms

ns.amplitut.de. 86400 IN A 192.195.142.21
;; Received 59 bytes from 162.219.55.2#53(ns2.d-zone.ca) in 51 ms


-------------------------------------------------------------------
Unsubscribe: http://cool.haxx.se/cgi-bin/mailman/listinfo/rockbox
FAQ: http://www.rockbox.org/twiki/bin/view/Main/GeneralFAQ
Etiquette: http://www.rockbox.org/mail/etiquette.html
Received on 2020-12-18