propgate docs
← taxonomy

DNSSEC_BOGUS

error

DNSSEC signatures for this domain fail validation, so validating resolvers cannot see any of its records.

Something is wrong and mail or certificates are affected.

How we know

  • bogus-zone.test

    Both DNSKEY RRSIGs corrupted, so the zone is bogus via the validating tier and fine via the permissive one.