This is kind of a silly question, but I just discovered this and now I'm curious about it.
If I run dig DS example.com @resolver.example +dnssec +multi
, the result is this:
example.com. 21600 IN RRSIG DS 8 2 86400 (
20220902055959 20220826044959 32298 com.
SvP16kjBe+SJe2U1uwjzE0jjkrduYTQms8UJdAvBV4Bfb0ou9vWhYv4c
Kaici9E9XIP+EyrDpwz2d6d6NRWKZYzcFfokhRQlz7W6Nm23qYGAQ+gu
A3LNWW+EMRK4**Hated**zPw0NukAYIzfIkOVF/xeixmq2kUxNeulqD5CnNW
sEXDX1GdC9wrq6Oh3R4Z2FJq8NKpBCflIV+nBtInFOv1UQ== )
I guess my DNSSEC configuration is... slightly hateful?
This is currently the longest valid English word I've seen in an RRSIG
, and it just happens to be on my primary domain.
What are the chances of this happening for 5-letter words?
I'm not sure if I'm allowed to share what the domain is, but if I am I have no qualms about posting it.