It was recently brought to our attention that mbix.ca was failing to resolve for anyone using Google Public DNS. The response to queries was a servfail, indicating a technical failure in name resolution. However, this problem would have been visible on any DNSSEC-validating resolver, which would not return results, after finding the signature expired for all mbix.ca records. The solution was to re-sign the zone. Longer-term, the solution will be to resign the zone automatically. We plan to implement that real soon.
Leave a Reply