Conversation

Notices

1. Embed this notice
   Waldo Jaquith (waldoj@mastodon.social)'s status on Thursday, 31-Oct-2024 12:32:23 JST Waldo Jaquith

   Confirmed: this is not just me.
   https://mastodon.social/@waldoj/113394127909972080

   • Embed this notice
     Waldo Jaquith (waldoj@mastodon.social)'s status on Thursday, 31-Oct-2024 12:32:22 JST Waldo Jaquith

     in reply to

     Here’s a hint as to what’s wrong with system-level networking services on macOS 15.1: Safari has inconsistent DNSSEC signature problems, while Chrome and Firefox (which use their own networking engines) do not. Every query has a different subset of signature problems.

     I think I'm too rusty on cryptography implementation to meaningfully debug this further; here's hoping Apple patches this soon.

   • Embed this notice
     feld (feld@friedcheese.us)'s status on Thursday, 31-Oct-2024 12:32:22 JST feld

     in reply to
     @waldoj are the only remote URLs that fail to load for domains that have DNSSEC?
   • Embed this notice
     Waldo Jaquith (waldoj@mastodon.social)'s status on Thursday, 31-Oct-2024 22:43:34 JST Waldo Jaquith

     in reply to

     • feld

     @feld Oooh, that’s a fine point. I will test that.

     feld likes this.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Thursday, 31-Oct-2024 22:43:53 JST feld

     in reply to
     @waldoj I haven't observed any issues yet but I also intentionally have DNSSEC disabled by my local DNS recursor