[dns-operations] google DNS doing validation?

[Mark Andrews]

In message <A592632C-842E-437B-A19E-01E0EEA31AC7 at ogud.com>, Olafur Gudmundsson 
writes:
> Looks like they are doing DNSSEC correctly but still not supporting DNAME 
> 
> java -jar fccgrade-0.9.9.jar -r 8.8.8.8
> Server 8.8.8.8 Grade= D ==> RFC1034 (old) style resolver --> Empty Answer:shi
> nkuro.net. A  AD sometimes missing    T1P/94 T2P/880 T3P/76 T4P/94 T5F/96 T6P
> /96 T7A/389 T8A/284 T9F/268 T10A/483 T11A/491 T12A/41 T13S/0
> Failed tests:
>  T6 DNAME Support := DNAME Not Supported RFC2672/RFC6672 --  NO DNAME seen in
>  answer 
>  T10 Signed DNAME := NO signed DNAME RFC4035 --  NO DNAME seen in answer 
>  T14 Returns Bogus := Skipped
> 
> 
> 	Olafur

So by definition they are *not* supporting DNSSEC and DNAME support is
manditory for DNSSEC.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org