We have received indication that the domain .biz DNSSEC DNSKEY is "bogus" and failing DNSSEC validation. Resolving isc.biz with VeriSign Labs indicates "None of the 5 DNSKEY records could be validated by any of the 2 DS records" and "The DNSKEY RRset was not signed by any keys in the chain-of-trust".
When we receive additional information, we will update the diary.
Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu
Jun 22nd 2013
6 years ago