<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I've just noticed that in the last few days that "BIND 9.16.22
(Extended Support Version) <id:59bfaba>" appears to be
generating CDS records for both KSK ***and ZSK*** records!<br>
</p>
<p>Nothing on my side has been changed although I do run automated
updates. I'm on a Linux machine running Gentoo.</p>
<p>$ dig DNSKEY EDU.ZA<br>
<br>
; <<>> DiG 9.16.6 <<>> DNSKEY EDU.ZA<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:
22867<br>
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0,
ADDITIONAL: 1<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags:; udp: 1232<br>
;; QUESTION SECTION:<br>
;EDU.ZA. IN DNSKEY<br>
<br>
;; ANSWER SECTION:<br>
EDU.ZA. 9378 IN DNSKEY 256 3 13
U9/K052f1oBX5WYbedZhLM0jd+rNAwEYNfuRUAsf2S3U7UNaEKV2pYtM
3dHSOdsNDiLkr0H77x9U2ZFtoN7U2A==<br>
EDU.ZA. 9378 IN DNSKEY 256 3 13
YPgTWLFxFXWMXlVaJB2bCA5F75l5yryFO/h9w+xXS/GfhhmvyZvh9NCv
MLPZckLRGbeZ5/BkyH9ae4X0IyzKYA==<br>
EDU.ZA. 9378 IN DNSKEY 257 3 13
75OMA5R90131FVGX1QcJiCGAUboYSmazf3dPpAPL0t33YLcx7bBnio6Y
qyrR77MRVZKNpWIBLcnz7YOLWNZXmQ==<br>
<br>
---------------------------</p>
<p>$ dig CDS EDU.ZA<br>
<br>
; <<>> DiG 9.16.6 <<>> CDS EDU.ZA<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:
11376<br>
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0,
ADDITIONAL: 1<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags:; udp: 1232<br>
;; QUESTION SECTION:<br>
;EDU.ZA. IN CDS<br>
<br>
;; ANSWER SECTION:<br>
EDU.ZA. 86400 IN CDS 569 13 2
350F4414CB611C04AD829CD2C23A5C60296EA635BF59D7F0B44CD02F 6B396A94<br>
EDU.ZA. 86400 IN CDS 9355 13 2
B0A16FBB3F5D6274665DE272FE5FF182ABC89B3072B668589E5EC6F0 513E36C9<br>
EDU.ZA. 86400 IN CDS 49988 13 2
6F99A6D6A4657F0A528AD2791B8B3E02AFB34E5DB79F5C53EA022A55 1874D40A<br>
<br>
These are also the values from inside my signed zone. Anyone have
any thoughts?<br>
This is going to screw up systems that poll for CDS records.<br>
</p>
<div class="moz-signature">-- <br>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title></title>
<p>Mark James ELKINS - Posix Systems - (South) Africa<br>
<a class="moz-txt-link-abbreviated" href="mailto:mje@posix.co.za">mje@posix.co.za</a> Tel: <a href="tel:+27826010496">+27.826010496</a><br>
For fast, reliable, low cost Internet in ZA: <a
href="https://ftth.posix.co.za">https://ftth.posix.co.za</a><br>
<br>
<br>
</p>
</div>
</body>
</html>