logoalt Hacker News

bfleschyesterday at 6:48 PM3 repliesview on HN

Weird, z.ai does not resolve for me. Is there anything special about that domain?

https://z.ai


Replies

feryesterday at 10:27 PM

If you have systemd-resolved, it tries to validate DNSSEC by default and replies with SERVFAIL if it fails. Same happens here, I go through some privacy focused DNS servers and they sometimes remove the signature.

$ resolvectl query z.ai

z.ai: resolve call failed: DNSSEC validation failed: no-signature

arcanemachineryesterday at 7:03 PM

Just tried it, works for me.

Alifatiskyesterday at 7:10 PM

Resolves fine for me