Hacker News new | ask | show | jobs
by bflesch 5 days ago
Weird, z.ai does not resolve for me. Is there anything special about that domain?

https://z.ai
3 comments
fer 4 days ago
If you have systemd-resolved, it tries to validate DNSSEC by default and replies with SERVFAIL if it fails. Same happens here, I go through some privacy focused DNS servers and they sometimes remove the signature.

$ resolvectl query z.ai

z.ai: resolve call failed: DNSSEC validation failed: no-signature

link
bflesch 4 days ago
That seems to be it, thanks for the explanation :)
link
arcanemachiner 5 days ago
Just tried it, works for me.
link
Alifatisk 5 days ago
Resolves fine for me
link