[ga] The True Authority? (Mainly for dig-gers)

[Marc Schneiders <marc@fuchsia.bijt.net>]

I was wondering what the true authority was for ICANN.ORG.

Opinions differ:

zeist:marc {224} dig icann.org. ns @a.gtld-servers.net

;; ANSWER SECTION:
icann.org.              2D IN NS        VENERA.ISI.EDU.
icann.org.              2D IN NS        NS.APNIC.NET.
icann.org.              2D IN NS        NS.ISI.EDU.
icann.org.              2D IN NS        NS.RIPE.NET.
icann.org.              2D IN NS        RIP.PSG.COM.
icann.org.              2D IN NS        SVC00.APNIC.NET.

So there are 6 nameservers, right? Wrong:

zeist:marc {225} dig icann.org. ns @VENERA.ISI.EDU

;; ANSWER SECTION:
icann.org.              1D IN NS        ns.isi.edu.
icann.org.              1D IN NS        rip.psg.com.
icann.org.              1D IN NS        ns.ripe.net.
icann.org.              1D IN NS        ns.apnic.net.
icann.org.              1D IN NS        svc00.apnic.net.
icann.org.              1D IN NS        ns.icann.org.
icann.org.              1D IN NS        venera.isi.edu.

The NET zone does not know about ns.icann.org. Pity. (Solution: Tell
Verisign about it.)

The SOA specifies another authority for ICANN.ORG, and not one of the 6
or 7 nameservers:

zeist:marc {238} dig icann.org soa @venera.isi.edu

;; ANSWER SECTION:
icann.org.              6H IN SOA       dns1.icann.org.
hostmaster.icann.org. (

A bit of a problem, if different servers have different opinions about the
true authority in the DNS. Who is coordinating this stuff?


--
This message was passed to you via the ga-full@dnso.org list.
Send mail to majordomo@dnso.org to unsubscribe
("unsubscribe ga-full" in the body of the message).
Archives at http://www.dnso.org/archives.html