Occasional SERVFAIL looking up CAA for be

[mnordhoff]

@webprofusion

I have a user who’s also seeing this for gratisdns.dk - they get randomly far through validation then start to get SERVFAIL. Using dig against all of the domains nameservers see to work for the CAA query. Made me wonder if this is some sort of DDoS protection that’s getting annoyed at the CAA queries from Let’s Encrypt.

gratisdns.dk actually malfunctions:

Getting servfail when renewing, or adding domains

P…