I've considered hard-coding some addresses into firmware as a fallback for a DNS outtage (which is more likely than not just misconfigured local DNS.) Events like this help justify this approach to the unconcerned.

▲

whalesalad 4 hours ago | parent [-]

The irony is that DNS is a global and distributed system meant to be resilient. It’s the DNSSEC layer on top in this case causing problems.

▲

cedilla 4 hours ago | parent [-]

denic is the single source of truth for zones under .de.

The only problem with DNSSEC here is that it's complex.

	▲	akerl_ 2 hours ago \| parent [-]
		A complex thing where making a mistake makes your domains drop off the internet seems like a pretty big "only problem".