Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: .biz DNSSEC DNSKEY is Invalid SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
.biz DNSSEC DNSKEY is Invalid

We have received indication that the domain .biz DNSSEC DNSKEY is "bogus" and failing DNSSEC validation. Resolving with VeriSign Labs indicates "None of the 5 DNSKEY records could be validated by any of the 2 DS records" and "The DNSKEY RRset was not signed by any keys in the chain-of-trust".

When we receive additional information, we will update the diary.



Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu


499 Posts
ISC Handler
Jun 22nd 2013

Sign Up for Free or Log In to start participating in the conversation!