INFORMATIONAL NOTICE FROM INTERNET SYSTEMS CONSORTIUM (ISC)

BIND 9 DNSSEC VALIDATION FAILS ON NEW DS RECORD

The ISC is recommending that organizations running a recursive resolver and plan on implementing DNSSEC validation, should upgrade to the most recent version of BIND. ISC has recently identified that non-upgraded BIND 9 resolvers with DNSSEC validation enabled will have a high probability of being unable to successfully resolve .COM names unless they are restarted.

Please refer to the informational notice on the ISC website: https://www.isc.org/announcement/bind-9-dnssec-validation-fails-new-ds-record.