Brussels / 3 & 4 February 2024


Observations on a DNSSEC incident: the russian TLD

On tuesday 30 january, a few days before FOSDEM, people noticed that Web sites under .ru (Russia) were all down. Because of the war, many people speculated this was an attack. But, actually, the problem came from a DNSSEC error in the top-level domain .ru and, as of today, nothing indicates it was an attack. We will describe the problem, the technical observations, possible causes and a few lessons.


Photo of St├ęphane Bortzmeyer St├ęphane Bortzmeyer