gpg 2.1.15, *no* keyservers found for submit/recv, "DNS query returned an error or no records: No such domain (nxdomain)"

[lists at ssl-mail.com]

On Wed, Oct 12, 2016, at 07:33 AM, Daniel Kahn Gillmor wrote:
> so it looks like you're doing an SRV lookup for the server in question.
> do you see anything other than an NXDOMAIN when you query for this same
> SRV from the command line?
> 
> fwiw, i'm seeing NXDOMAIN for this as well from my network perspective:

hm, same here ...

dig any hkps.pool.sks-keyservers.net

	; <<>> DiG 9.10.3-P4 <<>> any hkps.pool.sks-keyservers.net
	;; global options: +cmd
	;; Got answer:
	;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43782
	;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

	;; OPT PSEUDOSECTION:
	; EDNS: version: 0, flags:; udp: 4096
	;; QUESTION SECTION:
	;hkps.pool.sks-keyservers.net.  IN      ANY

	;; ANSWER SECTION:
	hkps.pool.sks-keyservers.net. 20 IN     RRSIG   NSEC 8 4 60 20161103103842 20161004093842 30729 sks-keyservers.net. m8Fm/GnAxhmuwswHgzMatQngOovhj/VCJlyFqRkLNy6WR8q/OFOk6kQp reDFdWNoRzmLvSjmMnPedelIAgOXVy1bxMzLnpW9+KWjcQRyKuzWHcnL kjOSpJ1mTiwEWnU9e+oC3VeHUp8SnVpY+as7voUK6XIyg+UOs/O1fZzD 2oMLLALj/GThbPgClBwirL+MHtXoQ2efVbT+KlEf8xOEz5a8MwfaNACj F/2PQxEki+c+hdeBByweBeW94bo8zKrmrAArLuro02OIOkPUGGlzfrny sDkToLJmEVvcgZHvpHHVYbjmPZZRaiSiJQEyLV/W7JJYAbwdMU675ZmD njHm8w==
	hkps.pool.sks-keyservers.net. 20 IN     NSEC    ipv4.pool.sks-keyservers.net. A AAAA RRSIG NSEC

	;; Query time: 0 msec
	;; SERVER: 10.19.2.100#53(10.19.2.100)
	;; WHEN: Wed Oct 12 07:37:13 PDT 2016
	;; MSG SIZE  rcvd: 413

dig any _hkp_tcp.hkps.pool.sks-keyservers.net

	; <<>> DiG 9.10.3-P4 <<>> any _hkp_tcp.hkps.pool.sks-keyservers.net
	;; global options: +cmd
	;; Got answer:
	;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18104
	;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

	;; OPT PSEUDOSECTION:
	; EDNS: version: 0, flags:; udp: 4096
	;; QUESTION SECTION:
	;_hkp_tcp.hkps.pool.sks-keyservers.net. IN ANY

	;; AUTHORITY SECTION:
	sks-keyservers.net.     10      IN      SOA     ns2.kfwebs.net. kf.kfwebs.net. 3161012162 600 14400 172800 60

	;; Query time: 0 msec
	;; SERVER: 10.19.2.100#53(10.19.2.100)
	;; WHEN: Wed Oct 12 07:37:23 PDT 2016
	;; MSG SIZE  rcvd: 116

dig SRV _hkp_tcp.hkps.pool.sks-keyservers.net

	; <<>> DiG 9.10.3-P4 <<>> SRV _hkp_tcp.hkps.pool.sks-keyservers.net
	;; global options: +cmd
	;; Got answer:
	;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39844
	;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

	;; OPT PSEUDOSECTION:
	; EDNS: version: 0, flags:; udp: 4096
	;; QUESTION SECTION:
	;_hkp_tcp.hkps.pool.sks-keyservers.net. IN SRV

	;; AUTHORITY SECTION:
	sks-keyservers.net.     1       IN      SOA     ns2.kfwebs.net. kf.kfwebs.net. 3161012162 600 14400 172800 60

	;; Query time: 0 msec
	;; SERVER: 10.19.2.100#53(10.19.2.100)
	;; WHEN: Wed Oct 12 07:37:32 PDT 2016
	;; MSG SIZE  rcvd: 116