https://status.internetnz.nz/incidents/gq1c6slz3198

DNSSEC chain validation issue for .nz
Incident Report for InternetNZ
Subscribe to Updates
Update
We are continuing to monitor for any further issues.

We have issued a news article on our website
Posted May 30, 2023 - 10:57 NZST
Update
We have identified a further issue with the same KSK rollover event
that affected .ac.nz, we have expanded the scope to all .nz domains
including .nz, .co.nz, .geek.nz, .gen.nz, .kiwi.nz, .maori.nz,
.net.nz, .org.nz, .school.nz, .cri.nz, govt.nz, .health.nz, .iwi.nz,
.mil.nz and .parliament.nz, starting at 2023-05-29 10:45 PM NZST

This issue will resolve over time, however if a recursive server is
still not resolving any these domains, and returning SERVFAIL, the
validating recursive server cache can be flushed for the relevant
zone to pick up the new DNSSEC records and return it to a functioning
state.

We recommend preemptively flushing all .nz zones before the issue
occurs.
Posted May 30, 2023 - 09:21 NZST
Update
We are continuing to monitor for any further issues.
Posted May 29, 2023 - 17:20 NZST
Monitoring
We have identified an issue affecting the signing of ac.nz during a
KSK rollover at 13:00 NZST, if you encounter issues with validation
of ac.nz please flush any recursive server cache for ac.nz.
Posted May 29, 2023 - 16:59 NZST
This incident affects: .nz DNS Network (.nz DNSSEC).
- Current Status Powered by Atlassian Statuspage
x

Subscribe to Incident

Subscribe to updates for DNSSEC chain validation issue for .nz via
email. You'll receive email notifications when incidents are updated.

Email address:
[                    ]
Subscribe to Incident 
This site is protected by reCAPTCHA and the Google Privacy Policy and
Terms of Service apply.