Widespread SERVFAIL problem related to DNS 0x20

[mnordhoff]

@jsha

My understanding is that even before CommunityDNS rolled out their change, this was an intermittent error, so one attempt might fail but the next attempt might succeed. In a typical setup with renewal attempts starting at 30 days and retrying twice a day, I would expect that the vast majority of renewals would eventually succeed. Do you have any examples of certificates that are consistently failing renewal?

I dunno... I was worried about one user with a multi-domain .pl certificate. They were able to renew 2 days after posting here, but that was about 12 hours after their previous certificate expired.

Yet another CAA SERVFAIL issue

P…

crt.sh | mail.majchrowski.waw.pl