Ask HN: What Happened in DNSSEC Yesterday?

Original Summary

I have had DNSSEC verification enabled for a couple of months in systemd-resolved. Not that I am particular paranoid or do any nuclear-sensitive stuff on my machine. Don't even own any Bitcoin. But mostly out of technical curiosity.<p>Until yesterday I had only noticed 2 broken sites (or sites affected by buggy systemd-resolved implementation as some voices claim). Some Jira Plugin and Swedish Railways SJ.<p>Yesterday basically the Internet stopped working for me. After a while I remembered good old operator wisdom "It's always DNS". And it was DNS. Systemd-resolved logged "missing-key" for basically every query I tried.<p>So I switched from DoT 1.1.1.1 @Cloudflare to DoT 8.8.8.8 @Google and life continued. Until today that suddenly out of nowhere showed the same symptom.<p>Turning off DNSSEC verification avoids the problem. An internet search brought up https://github.com/NordSecurity/nordvpn-linux/issues/1853 which also links to another one. The timing seems to match with my observation, but I don't use NordVPN. Any clues?

情报分类：技术学习与提效
分类依据：内容涉及技术、AI、软件工具或工程实践
信息来源：Hacker News 新项目
发布时间：2026/10/12 20:16:55

Original Summary

Post a reply