>>108761085
Hey my house is on fire!
>Strange, my house is fine? Skill issue.

>>108761019
Sorry, I was trying to fix my DSLite tunnel to play Dota 2, won't happen again.

>>108761019
...and nothing was lost.

>>108761019
>>108761191
Too bad 4chan doesn't use a .de domain, Hurensöhne.

>>108761216
Ehrenlose Kartoffel.

>>108761019
Who the fuck cares? Ever since fefe had his stroke there are zero German websites left worth reading.

i `dig`-ed google.de using different servers:
google (8.8.8.8) amd cloudflare (1.1.1.1) are okay.
quad9 (9.9.9.9) => no A address
Nord okay.
Mullvad and another VPN provider => no address

>>108761019
>these are the tech experts that want to force you to dox yourself for the children

was studiert ihr denn so

>>108761309
Ich bin 40, also offensichtlich Philosophie der Sozialpädagogik.

File: 1697208261978813.jpg (34 KB, 553x407)

34 KB JPG

>>108761019
>TFW my own private cloud is reachable
>TFW my friends and I are chilling on my teamspeak and laughing our asses off because I was too much of a cheapskate to get a .de tld
FEELS GOOD MAN, FEELS SO GOOD MAN.
Still tried fucking around with DNS for two hours though.

>>108761019
one guess is DNSSEC is involved.
https://news.ycombinator.com/item?id=48027897
There are big sites not working.
examples: ebay.de, kleinanzeigen.de,
welt.de, bild.de, t-online.de, zeit.de,
spiegel.de,
bahn.de, adac.de,

File: 1645679299221.png (385 KB, 563x498)

385 KB PNG

>>108761363
>wrong pic
Generational Fumble, fuck my life.
>>108761309
Informatik, was sonst?

>>108761309
https://www.youtube.com/watch?v=39UDZMgPg5k

File: deTLD.png (60 KB, 800x600)

60 KB PNG

>>108761363
>>108761383
https://www.youtube.com/watch?v=np2ymo0iMfk
Us btw

>>108761371
okay. following up on >>108761265, it actually looks like Nord's DNS servers are the one's consistently working with these sites. e.g.

% dig @103.86.96.100 +tls +noall +answer welt.de
;; Warning: Client COOKIE mismatch
welt.de.        207    IN    A    75.2.108.245

>>108761453 (Me)
>looks like Nord's DNS servers are the one's consistently working
from the few providers that i tested, that is. it's probably not the only one.
and this is not a Nord ad. i don't use Nord or Mullvad, the two VPN providers i mentioned by name.

File: Screenshot 2026-05-06 at (...).png (386 KB, 600x718)

386 KB PNG

>>108761019
Denic Team literally drunk on the job right now

>>108761453 (Me)
and this brings the question: was shoving application-level features like SVCB into DNS really a good idea?

>>108761510
>was shoving X features into Y a good idea
It never is

File: cloudflare.jpg (48 KB, 1103x171)

48 KB JPG

so cloudflare can just switch the encryption off when they feel like it?

>>108761559
it's got nothing to do with encryption, it's validation. and yes, they can just omit the validation if they feel like it.

>>108761264
The sad truth.

>>108761585
was literally just explaining my coworker in operational services the difference

>>108761492
This is a targeted attack on german infrastructure.

Alle Rentner müssen verrecken.

>>108761654
I miss that motherfucker like you wouldn't believe. Wasn't often that I'd agree with him but god damn he was one of the last real ones.

It's comming back slowly but not bc DENIX fixed it. Cloudflare seems to have disabled the DNSSEC resolver.

>>108761795
Should be solved but it takes time until all dns servers get the updated zones.

I have read this entire thread. OK.


Soooo ... what actually happened?

>>108761869
>The cause appears to be a failed DNSSEC ZSK rollover at DENIC. DENIC signed zone data with the ZSK key Keytag 33834 but did not publish this key in the DNSKEY record. Every DNSSEC-validating resolver considers the signature invalid and responds with `SERVFAIL` and the error: “EDE: 6 (DNSSEC Bogus): RRSIG with malformed signature found for de/soa (keytag=33834)”

>>108761869
The cause appears to be a failed DNSSEC ZSK rollover at DENIC. DENIC signed zone data with the ZSK key tag 33834, but did not publish this key in the DNSKEY record. Every DNSSEC-validating resolver considers the signature invalid and responds with SERVFAIL and the following error:

EDE: 6 (DNSSEC Bogus): RRSIG with malformed signature found for de/soa (keytag=33834)

>>108761869
ELI5, as far as I understand what seems to be the current overall picture:
New signatures were set active for DNSSEC (a security mechanism which makes sure, your DNS (like a phonebook) replies have not been interceoted and were not read by third parties). This broke a few things which were not ready for this.

File: 18237561395.png (24 KB, 666x666)

24 KB PNG

>>108761085