NASA Is Dark In Some Places (Update)

Keith’s 4:40 pm Update: They fixed it.

I was about to duplicate this issue when attempting to access the NASA website. I'm reaching out to our engineers to have the DNS issue looked into. ~DB

— ComcastCares (@comcastcares) November 21, 2017

Keith’s 12:00 pm Update: This is what IsItDownRightNow? has to say about NASA. Comcast seems to be having problems. But this guy in Sweden is having problems too.

Keith Cowing

NASA Watch founder, Explorers Club Fellow, ex-NASA, Away Teams, Journalist, Space & Astrobiology, Lapsed climber.

2 responses to “NASA Is Dark In Some Places (Update)”

1. DetailCurious says:

   November 21, 2017 at 1:32 pm

   0

   0

   This is the NASA IT dept.

   TL;DR – DNS is messed up.

   The http://www.nasa.gov CNAME rrset is missing an RRSIG. This means that the CNAME can’t be authenticated; any DNSEC-aware resolver will refuse to translate the name to protect you from site spoofing.

   In addition, one DNS server is not responding to TCP queries.

   And there are missing AAAA glue records for the CDN.

   Gory details at http://dnsviz.net/d/www.nas…

   • Christian Abel says:

     November 22, 2017 at 2:34 am

     0

     0

     Not just DNSSEC. I couldn’t resolve at all nasa.gov. No NS server address.