[jitsi-users] DNSSEC-Error


#1

when I start up Jitsi, I get strange that read:

"Jitsi has tried to reach the download.jitsi.org server. This domain is
provided with the protection of DNSSEC. The informations being recieved
by Jitsi from the DNS-Server to not match with the DNSSEC informations.
THIS SHOULDN'T HAPPEN ACCEPT SOME SERVERE MISTAKES WERE MADE AT
DOWNLOAD.JITSI.ORG. ITS A STRONG INDICATION; THAT THE INTERNET
CONNECTION IS NOT TRUSTWORTHY. ...."

I get similar messages, when I try to connect to google.

I use a router to connect with the internet. So two things are possible:
either Jitsi is not capable of coping with this simple (and here widely
common) fact, or my internet connection is really tapped.

Any idea about how to find out, whether it's really something between my
provider and the rest of the world, or whether it's just a problem with
my connection via router, that provides it's own IP-Adress...?

ยทยทยท

--
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.17 (MingW32)
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=bGpV
-----END PGP PUBLIC KEY BLOCK-----


#2

when I start up Jitsi, I get strange that read:

"Jitsi has tried to reach the download.jitsi.org server. This domain is
provided with the protection of DNSSEC. The informations being recieved
by Jitsi from the DNS-Server to not match with the DNSSEC informations.
THIS SHOULDN'T HAPPEN ACCEPT SOME SERVERE MISTAKES WERE MADE AT
DOWNLOAD.JITSI.ORG. ITS A STRONG INDICATION; THAT THE INTERNET
CONNECTION IS NOT TRUSTWORTHY. ...."

I get similar messages, when I try to connect to google.

This is weird. Neither Jitsi nor Google are secured with DNSSEC and
therefore shouldn't fail.

I use a router to connect with the internet. So two things are possible:
either Jitsi is not capable of coping with this simple (and here widely
common) fact, or my internet connection is really tapped.

It could be possible that your router (or the nameserver you configured) is
not capable of dealing with DNSSEC correctly. This could range from
processing DS queries at the child zone (instead of at the parent like with
NS), unable to respond to DNSKEY or RRSIG records, the sheer size of the
packets due to not supporting TCP.

While not impossible, I doubt your connection is wiretapped - unsigned
domains could easily be tampered without the need to provoke failures at the
signed root or .com.

Any idea about how to find out, whether it's really something between my
provider and the rest of the world, or whether it's just a problem with
my connection via router, that provides it's own IP-Adress...?

If you open the advanced section of the message, what is reported as the
detailed failure?

Ingo