Welcome to Comcast DNS

The domain ul.pt is currently unreachable on DNSSEC enforcing resolvers. This is because the return size of the lookup with DNSSEC records is larger than the path MTU of the domain. The domain owners have been contacted and made aware of the issue. The DNSViz report of this failure can be found at http://dnsviz.net/d/ul.pt/UTC7WQ/dnssec/.

The domain mausandhoffman.com is currently failing DNSSEC validation. This is because the DS records published do not correspond to any DNSKEYs in the domain. The domain owners have been contacted and made aware of the issue. The DNSViz report of this failure can be found at http://dnsviz.net/d/www.mausandhoffman.com/USaT8g/dnssec/.

The domain nsopw.gov is currently failing DNSSEC validation. This is because the domain was signed by DNSKEYs that do not correspond to the DS records in parent domain (.gov). The domain owners have been contacted and made aware of the issue. The DNSViz report of this failure can be found at http://dnsviz.net/d/nsopw.gov/URwiqQ/dnssec/

The domain www.clinicaltrials.gov is currently failing DNSSEC validation in some areas. This is because the domain rolled it's keys and the old ones are still cached. The domain owners contacted us to make us aware of the issue. We will be flushing the platform and resolution should resume shortly.

The domain www.medlineplus.gov is currently failing DNSSEC validation in some areas. This is because the domain rolled it's keys and the old ones are still cached. The domain owners contacted us to make us aware of the issue. We will be flushing the platform and resolution should resume shortly.

The domain fas.gov was failing DNSSEC validation yesterday. This is because not all configured name servers were returning DNSSEC records, causing occasional validation failure. The domain owners contacted our team to report the issue as resolved. The DNSViz report of this failure can be found at http://dnsviz.net/d/smext.faa.gov/URrjgg/dnssec/.

The domains vpn.nau.edu and peoplesoft.nau.edu are currently failing DNSSEC validation. This is because the DNSKEY for each of these domains do not correspond to their DS records in the parent domain. The domain owners have been contacted and made aware of the issue. The DNSViz reports of this failures can be found at http://dnsviz.net/d/peoplesoft.nau.edu/UQaJ_Q/dnssec/ and http://dnsviz.net/d/vpn.nau.edu/UQaKOA/dnssec/.

The domain treasury.gov (and other related domains) was failing DNSSEC validation for a few hours this morning. This was because old DNSSEC keys were stored in cache following a key rollover. The domain owners contacted us and corrective action was taken.

The domain hud.gov is currently failing DNSSEC validation. This is because the RRSIGs covering this domain have expired. The domain owners have been contacted and made aware of the issue. The DNSViz report of this failure can be found at http://dnsviz.net/d/portal.hud.gov/UQAF9Q/dnssec/.

The domain arausa.com is currently failing DNSSEC validation. This is because the domain DS records do not point to a valid DNSKEY. The domain owners have been contacted and made aware of the issue. The DNSViz report of this failure can be found at http://dnsviz.net/d/arausa.com/UPOBTA/dnssec/