Bogus DNSSEC but no errors in dnsviz

Luckily the ALG 7 support commit fixed it already but theres a general issue with multi RRSIGS when one is invalid. Depending on the order its loaded it might return the wrong thing. Trying to get it merged but mailbox.org is fixed with the changes you pulled already i was just looking at a stale attempt.

I wrote to the hickory developers and they’re underfunded so it might take a while until the release a new version with all those fixes

Is merged, so hopefully obscure errors with unsupported algos (dual signing) or key rollover will be less likely in the future.

Stalwart 0.16.21 will include it

I still an issue:

2026-09-09T08:39:30Z INFO IP address lookup failed (delivery.ip-lookup-failed) queueId = 328546478953863168, queueName = "remote", from = "REDACTED", to = ["[email protected]"], size = 1706, total = 1, domain = "pensionboslucht.nl", hostname = "pensionboslucht-nl.mail.protection.outlook.com", details = "Temporary Failure for pensionboslucht-nl.mail.protection.outlook.com: Connection failed: lookup error: DNS resolution error: DNS error: DNSSEC validation failed", elapsed = 311ms

2026-09-09T08:35:19Z INFO IP address lookup failed (delivery.ip-lookup-failed) queueId = 328150846885875712, queueName = "default", from = "[email protected]", to = ["[email protected]"], size = 2825, total = 1, domain = "watchdog.kevlarr.io", hostname = "alt2.aspmx.l.google.com", details = "Temporary Failure for alt2.aspmx.l.google.com: Connection failed: lookup error: DNS resolution error: DNS error: DNSSEC validation failed", elapsed = 301ms

Are these related or is this a new issue?

New issue, fixed in hickory 0.26.3.