google public dns cannot resolve every .mm ccTLD domain

[Kyaw Khine Htoo]

Dear admin,
Today, Google public DNS cannot resolve any of .mm ccTLD domain including google.com.mm. Is there any problem ? 
Thanks.

--

Kyaw

[Alex Dupuy]

The domain administrators for the Myanmar .MM ccTLD need to fix their chronically broken DNSSEC implementation.  Google Public DNS validates DNSSEC when it is configured, so the DNSSEC failure causes .MM domains to be unreachable (this is also true for users of Verisign Public DNS (64.6.64.6) or Comcast ISP in the USA, which also validate DNSSEC.

Once again, they have let the signatures for the ccTLD .MM zone expire, breaking DNSSEC for all .MM domains: http://dnsviz.net/d/mm/VtaAsA/dnssec/

A similar problem (https://code.google.com/a/google.com/p/public-dns/issues/detail?id=1352) was reported six weeks ago and fixed a week afterwards.

However, there have been many many more DNSSEC outages for .MM, as reported at https://ianix.com/pub/dnssec-outages.html (over 5 in 2013, and several in every other year).

Please report this latest outage to the Myanmar domain administrators:

http://www.iana.org/domains/root/db/mm.html
    ksh...@mpt.net.mm, zawmin...@mptmail.net.mm
hostm...@nic.net.mm.

Just don't try to notify them using Gmail, as that will be unable to resolve .MM domain names either, so mail will just stall until they fix their ccTLD.