search

Koenkk / zigbee2mqtt

Zigbee 🐝 to MQTT bridge 🌉, get rid of your proprietary Zigbee bridges 🔨
https://www.zigbee2mqtt.io
GNU General Public License v3.0
12.14k stars 1.68k forks source link

zigbee2mqtt.io breaks DNSSEC #2012

Closed electrofloat closed 5 years ago

electrofloat commented 5 years ago

Since there's no issue tracking on zigbee2mqtt.io repo I had to create this one here. I noticed that the website is regularly unavailable, and it seemed random. Investigation showed that the issue is with the CNAME record at apex. Such zones are illegal according to the RFCs:

http://dnsviz.net/d/zigbee2mqtt.io/dnssec/

Can you please get in contact with your DNS provider and make them fix this issue asap? (Some hints on how to fix this: https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/)

Thank you!

Koenkk commented 5 years ago

The current configuration is:

image

I've changed it to

image

Does that fix this issue?

electrofloat commented 5 years ago

Yes it does. Although it wasn't your fault in the first place, it is a good fix for the mentioned issue.

Dynadot shouldn't let their customers configure an illegal DNS record at all. Even if you fixed it for yours, any other domains they own could have this exact issue. So I'm still encouraging you to let them know about this, and hopefully they'll implement some sort of validation or not allow this kind of configuration at all for any of their domains.

Thank you!

Koenkk commented 5 years ago

I've send them a mail, thanks!