{"id":170471,"date":"2026-05-06T12:25:08","date_gmt":"2026-05-06T10:25:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/domennaya-zona-de-na-neskolko-chasov-byla-vyvedena-iz-stroya-iz-za-dnssec"},"modified":"2026-05-06T12:25:08","modified_gmt":"2026-05-06T10:25:08","slug":"domennaya-zona-de-na-neskolko-chasov-byla-vyvedena-iz-stroya-iz-za-dnssec","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/domennaya-zona-de-na-neskolko-chasov-byla-vyvedena-iz-stroya-iz-za-dnssec","title":{"rendered":"La zone de domaine DE a \u00e9t\u00e9 hors service pendant plusieurs heures en raison de DNSSEC.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Une panne massive est survenue dans la zone de domaine \u00ab DE \u00bb, utilis\u00e9e en Allemagne. Les probl\u00e8mes ont \u00e9t\u00e9 caus\u00e9s par une erreur dans la configuration de DNSSEC pour la zone racine \u00ab DE \u00bb, commise par l'organisation DENIC, responsable du domaine de premier niveau \u00ab DE \u00bb. Du 5 mai \u00e0 22h30 au 6 mai \u00e0 1h30 (MSK), toute tentative de r\u00e9solution des domaines dans la zone \u00ab DE \u00bb via des serveurs DNS utilisant DNSSEC pour v\u00e9rifier l'authenticit\u00e9 des donn\u00e9es a \u00e9chou\u00e9. Sur les serveurs DNS utilisant DNSSEC, l'erreur s'est \u00e9galement manifest\u00e9e lors de la r\u00e9solution. domaines<\/a>, n'utilisant pas directement DNSSEC. <\/p>\n

Le probl\u00e8me a affect\u00e9 de nombreux r\u00e9solveurs DNS de fournisseurs et des services DNS publics tels que 1.1.1.1 et 8.8.8.8. En tant que mesure temporaire, l'entreprise Cloudflare a d\u00e9sactiv\u00e9 la v\u00e9rification de l'authenticit\u00e9 via DNSSEC pour les domaines de la zone \u00ab DE \u00bb dans son service DNS 1.1.1.1. Les utilisateurs des r\u00e9solveurs DNS o\u00f9 DNSSEC a \u00e9t\u00e9 d\u00e9sactiv\u00e9 n'ont pas \u00e9t\u00e9 touch\u00e9s. <\/p>\n

Les causes officielles de l'incident n'ont pas encore \u00e9t\u00e9 annonc\u00e9es. Il est suppos\u00e9 que le probl\u00e8me est survenu \u00e0 cause d'une erreur lors de la mise \u00e0 jour de la signature num\u00e9rique pour la zone \u00ab DE \u00bb, effectu\u00e9e le 5 mai \u00e0 20h49 (MSK). La cl\u00e9 utilis\u00e9e pour la v\u00e9rification du domaine de premier niveau est la racine de confiance pour les autres cl\u00e9s utilis\u00e9es dans les domaines de second niveau et utilise \u00e0 son tour la cl\u00e9 du domaine \u00ab . \u00bb comme sup\u00e9rieur pour confirmer sa confiance. <\/p>\n

\u00c0 la suite de l'op\u00e9ration effectu\u00e9e dans la zone de domaine \u00ab DE \u00bb, la signature cryptographique (RRSIG \u2014 Resource Record Signature) pour l'enregistrement DNS NSEC3 s'est r\u00e9v\u00e9l\u00e9e incorrecte. L'enregistrement NSEC3 est utilis\u00e9 pour confirmer l'authenticit\u00e9 des r\u00e9ponses DNS concernant l'absence de domaine, afin d'exclure les attaques par substitution de r\u00e9ponses NXDOMAIN pour les domaines existants. En cas de probl\u00e8me avec la signature num\u00e9rique de l'enregistrement NSEC3, le serveur DNS ne peut pas authentifier les hachages des donn\u00e9es concernant l\u2019existence des domaines et, par cons\u00e9quent, ne peut pas proc\u00e9der \u00e0 la v\u00e9rification, consid\u00e9rant la r\u00e9ponse comme fausse et renvoyant une erreur pour toute requ\u00eate concernant un domaine.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u043e\u0438\u0437\u043e\u0448\u0451\u043b \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0439 \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b «DE», \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 DNSSEC \u0434\u043b\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0437\u043e\u043d\u044b «DE», \u0441\u043e\u0432\u0435\u0440\u0448\u0451\u043d\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 DENIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u0434\u043e\u043c\u0435\u043d \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f «DE». \u0421 5 \u043c\u0430\u044f 22:30 \u043f\u043e 6 \u043c\u0430\u044f 1:30 (MSK) \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0438\u043d\u0433\u0430 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0432 \u0437\u043e\u043d\u0435 «DE» \u0447\u0435\u0440\u0435\u0437 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0435 DNSSEC \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u043b\u0430\u0441\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170471","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47La zone de domaine DE a \u00e9t\u00e9 hors service pendant plusieurs heures en raison de DNSSEC | ProHoster","description":"Une panne massive a affect\u00e9 la zone de domaine \"DE\", utilis\u00e9e en Allemagne.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/domennaya-zona-de-na-neskolko-chasov-byla-vyvedena-iz-stroya-iz-za-dnssec","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u043c\u0435\u043d\u043d\u0430\u044f \u0437\u043e\u043d\u0430 DE \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u0431\u044b\u043b\u0430 \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u0430 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0438\u0437-\u0437\u0430 DNSSEC | ProHoster","og:description":"\u041f\u0440\u043e\u0438\u0437\u043e\u0448\u0451\u043b \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0439 \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b "DE", \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/domennaya-zona-de-na-neskolko-chasov-byla-vyvedena-iz-stroya-iz-za-dnssec","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-06T10:25:08+00:00","article:modified_time":"2026-05-06T10:25:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/170471","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=170471"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/170471\/revisions"}],"predecessor-version":[{"id":170714,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/170471\/revisions\/170714"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=170471"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=170471"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=170471"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}