For reference the "trick" is usually referred to as "0x20 randomization" and as far as I'm aware we've been using it since launch. I suspect the only change was the CAA servfail change. We've seen some other nameservers have a strange interaction between 0x20 and CAA records.
cpu
4
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| PowerDNS: Can't find why CAA servfails | 49 | 11615 | July 21, 2017 | |
| DNS problem: SERVFAIL looking up CAA | 15 | 4446 | April 8, 2021 | |
| CAA servfail with register.com | 28 | 2364 | January 3, 2023 | |
| How to reproduce CAA SERVFAIL? Works for me, doesn't for LE staging or prod | 9 | 2189 | October 2, 2017 | |
| Help diagnosing CAA failures `ns1.cyso.nl` | 13 | 3751 | July 24, 2017 |