It's always DNS: Denic says sorry for crashing Germany's internet

Denic says the DNS blunder that brought most of Germany’s internet down on Tuesday evening is now resolved, and that websites should be operating normally after hours of disruption. The registry, which looks after Germany’s .de top-level domain, said the problems were first detected at 21:57 on May 5, but engineers rolled out …

[Taliesinawen]

The root cause of the error

* The outage was triggered by a malformed DNSSEC signature (specifically an NSEC3 RRSIG record) distributed by DENIC during a scheduled Zone Signing Key (ZSK) rotation

* Because the signature was invalid, security-conscious DNS resolvers (like Google Public DNS (8.8.8.8), Cloudflare (1.1.1.1), and Quad9) did exactly what they were programmed to do: they rejected the records as untrustworthy. (ClippyAI)

[Anonymous Coward]

Denic, Denic, oh with your users blue

Denic, Denic, you did a crash that's true

Denic, Denic, they're so annoyed at you