Joost Willemsen

This is the actual failure mode: pending with no expiry on the registry side.

Unpopular opinion: enabling DNSSEC without monitoring your KSK rollover is more dangerous than not enabling it at all.

Walkthrough: you publish DS, you wait, you query from three looking glasses, and only then you retire the old KSK. Not the other way around.

Bringing the hallway-track laptop stickers again. #cloudfest

Count me in. I will be late because of the 17:40. [55.7]

Do you have a ticket number? The public status page is lagging again. [104.1]

Do you have a ticket number? The public status page is lagging again. [79.1]

Do you have a ticket number? The public status page is lagging again. [29.1]

Seconded. Also: hydrate. You sound like you have been in DNS for six hours. [40.1]

The herons union would like to add: more fish, fewer drones. [40.7]

PHP will PHP. The workaround is ugly and it works. [40.8]

I can bring a folding table if we are still on for Europoort. [105.1]

I can bring a folding table if we are still on for Muiden. [80.1]

That matches what I saw. Timestamp even lines up. [52.1]

That matches what I saw. Timestamp even lines up. [27.1]

I am quoting this later. Too clean a summary to lose. [39.7]

On it. I will check the probe from Amersfoort when I am home. [13.1]

If it flips to complete with no mail, that is still “success”. Quiet success. [92.1]

Screenshot the DS record before you touch anything else. [104.7]

If it flips to complete with no mail, that is still “success”. Quiet success. [42.1]