@thatcks (dnscache having served me well for ~15 years)
So unbound can't resolve http://apod.nasa.gov , probably because of more DNSSec idiocity. I think I need a new DNS caching resolver.
-
-
-
@bdha dnscache is what I used for years too until I concluded that it was (dangerous) abandonware. I may want to rethink that. -
@thatcks Dangerous how? (I haven't reviewed any of the "life with" patches in years.) -
@bdha No specific holes I know of, but I assume all abandoned Internet software is dangerous in the long run due to changing environments.
-
-
@thatcks djb dnscache + patches is something I'm going to look into soon. -
@thatcks per http://dnssec-debugger.verisignlabs.com/apod.nasa.gov DNSSEC is indeed broken. Turn up details to see CNAME to insecure sub-domain.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
Chris Siebenmann
Bryan HorstmannAllen
Grant Taylor