[dns-operations] What's wrong with my domain?

[Stephane Bortzmeyer]

On Wed, Jul 02, 2014 at 12:08:36PM +0100,
 Tony Finch <dot at dotat.at> wrote 
 a message of 25 lines which said:

> Your DS record doesn't match your DNSKEY records.

The OP could also use the excellent DNSviz:

http://dnsviz.net/d/gu.edu/U7Pp0g/dnssec/

which rightly says:

gu.edu/DNSKEY:DS RRs exist for algorithm(s) 7 in the edu zone, but no matching DNSKEYs of algorithm(s) 7 were used to sign the gu.edu DNSKEY RRset.