Bitcoin Forum

Economy => Marketplace => Topic started by: Theo on May 21, 2012, 10:25:31 PM



Title: Bitcoinica.com will be unreachable for Comcast customers from May 29 on
Post by: Theo on May 21, 2012, 10:25:31 PM
Bitcoinica.com has an invalid DNSSEC configuration and is not reachable for users with DNSSEC validation enabled (this is known for a few weeks (https://bitcointalk.org/index.php?topic=42267.msg688795#msg688795)).
Most ISPs do not validate DNSSEC, but a few do, like Comcast. Comcast set up a temporary exempt to allow DNS resolution for bitcoinica.com despite the DNSSEC validation failure. This exempt will be removed on Tuesday, May 29 (http://www.dnssec.comcast.net/). Thus, bitcoinica.com will be offline for Comcast users.

Test here if your DNS resolver validates DNSSEC signatures: http://dnssec.vs.uni-due.de
If the result is YES, then you're either a Comcast customer or you already can't reach bitcoinica.com (like "Could not locate remote server").

Solution: Bitcoinica has to login at their registrar and remove the two erroneous DS records (see dnsviz.net (http://dnsviz.net/d/bitcoinica.com/T7p6EA/dnssec/))

Workaround: add 8.8.8.8 as DNS server in your network configuration (this disables DNSSEC validation – make sure you want this).