Tootfinder

Opt-in global Mastodon full text search. Join the index!

@jtk@infosec.exchange
2026-03-31 19:59:33

"Security Vulnerabilities in RFC 8484 - DNS Queries over HTTPS (DoH)"
#DNS

[DNSOP] Security Vulnerabilities in RFC 8484 - DNS Queries over HTTPS (DoH)
Search IETF mail list archives

@publicvoit@graz.social
2026-05-08 20:13:30

#denic

Analyse des DNS-Ausfalls vom 5. Mai 2026
Stand Frankfurt am Main, 8.5.2026  Im Rahmen eines regulären DNSSEC-Schlüsselwechsels am 5.5.2026 wurden teilweise nicht validierbare Signaturen erzeugt und verteilt. Hierdurch konnten validierende Resolver ihre DNS-Antworten für .de-Domains zeitweise nicht erfolgreich verifizieren. Dies führte zu spürbaren Einschränkungen bei der Erreichbarkeit von .de-Domains für ca. drei Stunden.

@newstik@social.heise.de
2026-05-05 21:39:27

Domains in the German .de zone are currently hard to reach. The cause seems to be a misconfiguration in DNS, specifically #DNSSEC . #DENIC is working on it.
We report, in German

DNS-Probleme: .de-Domains nicht erreichbar
Ein Problem bei DNS verhindert, dass .de-Domains aufgelöst werden. Das Problem ist unabhängig von Providern und DNS-Anbietern.

@usul@piaille.fr
2026-04-20 07:31:13

Petite question nom de domaine, serait-il possible d'enregistrer un .fr mais dont le nom de domaine serait écrit en cyrilique?
#nomdedomaine #dns #afnic

@stsquad@mastodon.org.uk
2026-04-10 15:41:50

*sigh* it's always #DNS. It seems that my #turris has become a DNS memory hole again and just fails to fetch A records that it definitely should. Of all the components on it the #knot

@pixelcode@social.tchncs.de
2026-05-05 21:37:00

No wonder I've had trouble connecting to some websites: #Cloudflare's DNS is impaired for .de top-level domains. (And I don't even use their #DNS myself 🤡)
Correction: “All #DNSSEC-si…

Cloudflare System Status Resolution Issues for .de Domains The issue has been identified and a fix is being implemented. May 05, 2026 - 21:20 UTC Investigating - We are observing issues with authoritative resolution for the .de TLD. May 05, 2026 - 21:17 UTC
@weltenkreuzer@social.tchncs.de
2026-05-05 20:39:01

Falls ihr euch wundert: Es scheint gerade ein größeres Problem mit dem #DNS bei allen(!) .de-Domains zu geben. (Fast) nix geht mehr ...
Edit 23:37: Hat sich wohl geklärt - ist nur noch nicht bei allen DNS-Servern angekommen.

@portaloffreedom@social.linux.pizza
2026-05-17 08:38:41

What is the best non spying #DNS people use these days?
Assume my ISP, OpenDNS (208.67.222.222) , google (8.8.8.8) and cloudflare (1.1.1.1) are not respecting my privacy at all

@adlerweb@social.adlerweb.info
2026-05-05 19:47:59

Offenbar hat es #DNS zerlegt. Die DNSSEC-Keys für .de (?) sind ungültig.

@galaxydinodragon@social.linux.pizza
2026-05-08 19:16:44

I decided I hadn't done enough fixing stuff in a duct tape manner recently so:
- I decided to remove rate limits from my pihole main server and dnsperf it to oblivion
- I believe I caused a database to be corrupted or something doing this
- had to copy databases from my backup to the main
What a fun afternoon
#dns

@newstik@social.heise.de
2026-05-05 21:06:02

It is always #DNS

@neverpanic@chaos.social
2026-05-05 21:01:05

So apparently #DEnic has messed up #DNSSEC records for .de, and essentially all resolutions of .de domains now randomly fail. For example, Google DNS just gave me "RRSIG with malformed signature found for 76b2e6birnkv6aekmcbtnl5i4qkbji6a.de/nsec3 (keytag=33834)" in a failure response. With caching,…

@floheinstein@chaos.social
2026-05-06 03:03:49

Looks like the problem is fixed and .de-Domains are coming back
#DNSSEC #denic #infosec #DNS

3 part meme with pictures from Indiana Jones and the last crusade Top bar: Indiana Jones throwing a Nazi officer out of the Zeppelin. Indi is labelled DNS Server, the Nazi officer is labelled .de-domains Center bar: Nazi officer falling into a pile of luggage, all labelled NXDOMAIN Bottom bar: Indiana pointing out of the window where he just threw the officer out. He says RRSIG with malformed signature found for de/soa