Not working DNSSEC on hosted zones

Question

I create DS record with the route 53 keys data in Domain register .cl, its works and validate the keys, but when i test DNSSEC for the hosted zones in route 53, i recieve No DS records found for norcomsys.cl in the cl zone, the register are insecure?

Answer

There was a problems with nic.cl, its take some time to update and validate the DS record, when they validate the DS record, the problems was resolve.

Answer

According to DNSVIZ (https://dnsviz.net/d/norcomsys.cl/dnssec/), DNSSEC is enabled and working correctly for `norcomsys.cl`

The .cl TLD is returning DS record for `norcomsys.cl`
```
$ dig norcomsys.cl @cl2-tld.d-zone.ca DS +short
9037 13 2 8F772DDB3DC7AABFE4094D0F9110E39EBED14778953F59321F6D82C8 D58B5728
```
Google DNS which performs DNSSEC validation, is returning RRSIG when resolving `norcomsys.cl`
```
$ dig norcomsys.cl @8.8.8.8 +dnssec +short
186.67.10.50
A 13 2 300 20220603091147 20220603070647 62283 norcomsys.cl. K6yz3hyKboDYYr9METvaSS0nJd2kld4OqGh9wRNosar2qwM+e4BeC8Ml lJjhFVJZO/FLam8JF0/Q73VJ/cgLAg==
```
How are you checking for DS record for  `norcomsys.cl`?

Not working DNSSEC on hosted zones

関連するコンテンツ