postbank.de / dslbank.de

[Andreas Pothe]

Am 02.02.2016 um 13:30 schrieb Andreas Pothe:
> Deutsche Postbank has some issues on its DNS servers:
> http://dnsviz.net/d/postbank.de/dnssec/
> http://dnsviz.net/d/dslbank.de/dnssec/
> http://dnsviz.net/d/bhw.de/dnssec/ (postbank|dslbank|bhw).de/DNSKEY:
> The response (512 bytes) was malformed. (62.153.105.1, 62.153.105.2,
> 195.50.155.127, UDP_0_EDNS0_32768_512) May this cause the reported
> problems on some systems? In fact I know Deutsche Postbank AG do not
> promote any TLSA / DANE records for any of its domains. 

Oh, dslbank.de has a corrupt DS entry at .de level (DS without
corresponding DNSKEY). This can make trouble too, I think.