I have had DNSSEC verification enabled for a couple of months in systemd-resolved. Not that I am particular paranoid or do any nuclear-sensitive stuff on my machine. Don't even own any Bitcoin. But mostly out of technical curiosity.
Until yesterday I had only noticed 2 broken sites (or sites affected by buggy systemd-resolved implementation as some voices claim). Some Jira Plugin and Swedish Railways SJ.
Yesterday basically the Internet stopped working for me. After a while I remembered good old operator wisdom "It's always DNS". And it was DNS. Systemd-resolved logged "missing-key" for basically every query I tried.
So I switched from DoT 1.1.1.1 @Cloudflare to DoT 8.8.8.8 @Google and life continued. Until today that suddenly out of nowhere showed the same symptom.
Turning off DNSSEC verification avoids the problem. An internet search brought up https://github.com/NordSecurity/nordvpn-linux/issues/1853 which also links to another one. The timing seems to match with my observation, but I don't use NordVPN. Any clues?
Until yesterday I had only noticed 2 broken sites (or sites affected by buggy systemd-resolved implementation as some voices claim). Some Jira Plugin and Swedish Railways SJ.
Yesterday basically the Internet stopped working for me. After a while I remembered good old operator wisdom "It's always DNS". And it was DNS. Systemd-resolved logged "missing-key" for basically every query I tried.
So I switched from DoT 1.1.1.1 @Cloudflare to DoT 8.8.8.8 @Google and life continued. Until today that suddenly out of nowhere showed the same symptom.
Turning off DNSSEC verification avoids the problem. An internet search brought up https://github.com/NordSecurity/nordvpn-linux/issues/1853 which also links to another one. The timing seems to match with my observation, but I don't use NordVPN. Any clues?