Camille Bernard

Rolling a KSK without watching the parent DS is a coin flip. #dns #dnssec

If your DS is published but the child zone still serves an old KSK, that is not “propagation”. That is a split brain.

Let me know if you still need a trailer. Mine is free after 10:00. [118.1]

This is the bit I keep forwarding to people who think DNS is “just a lookup”.

If you only read one kwet this week, make it the one I am quoting. (49)

Do you have a ticket number? The public status page is lagging again. [104.1]

I can bring a folding table if we are still on for Maastricht. [104.2]

Do you have a ticket number? The public status page is lagging again. [29.1]

I can bring a folding table if we are still on for Harderwijk. [79.2]

I can bring a folding table if we are still on for Filmwijk. [29.2]

Same energy as the 03:12 outage, but daylight this time. (97)

Seconded. Also: hydrate. You sound like you have been in DNS for six hours. [40.1]

I had the opposite experience in Amersfoort. Maybe it is a platform thing. [40.2]

PHP will PHP. The workaround is ugly and it works. [40.8]

This should be in the house rules. People keep rediscovering it. [119.1]

The Maastricht version of this story is even weirder.

On it. I will check the probe from Muiden when I am home. [13.1]

I can bring a folding table if we are still on for Harderwijk. [105.1]

This is the actual failure mode. Pending with no expiry. [80.2]

If you only read one kwet this week, make it the one I am quoting. (109)