I've noticed a spike of ServFail responses on our caching resolvers due to some DNSSEC issues on time.nist.gov (CNAME to ntp1.glb.nist.gov). If anyone of you guys has a direct contact would you be so kind and notify them...
a message of 9 lines which said:
If anyone of you guys has a direct contact would you be so kind and
notify them...
Well, this is quite simple, use whois :
% whois nist.gov
% DOTGOV WHOIS Server ready
Domain Name: NIST.GOV
Status: ACTIVE
Last update of whois database: 2016-08-26T08:37:05Z <<<
Please be advised that this whois server only contains information pertaining
to the .GOV domain. For information for other domains please use the whois
server at RS.INTERNIC.NET.
OK, I mean, use the DNS:
% dig +short SOA nist.gov
gm.nist.gov. please_set_email.absolutely.nowhere. 1221679 10800 1080 2419200 300
SOA 7 2 1800 20160902083535 20160826073535 1214 nist.gov. T4NfR25TRRdevhKoPPuk9mAse7q8+sxvKQgmh8KsVu3FYdIsqIgApjiG 1JJu/Jqf1vIJV2mcne/g0VUPUmGY0Cw8p8yhWbntIsW/Wo+TIU4iuUJN D6H7mxpejKS2l0M6omJnIZ8OXI5PsmNhwT+A2Mw2LprJXkiUe4nho04A kBU=
SOA 7 2 1800 20160902083535 20160826073535 9830 nist.gov. mJRYF2avTTuzvkDzbiVpurN/TksEie1Q5FmgE4DpWXJGv8d8TB0r3S1t S8EXYsBzIvysZlLnj0VDO62LY+OiLBmk/TzwnCSv89PrGRGngBG6LpuE 3Hl5xekkbxCVA40Fm1S0x9l0VMOmakXlfuz4U/t4UX9/yrLtlLjXpnCl +lM=
OK, I give in ![]()
I have not been successful in contacting the parties responsible for domains under .gov. Maybe hitting up their registrar will work for you.
In my experience, it will be fixed within a week's time. We see DNSSEC issues with different .gov domains two to three times a year.