[dns-operations] What's wrong with my domain?

Stephane Bortzmeyer bortzmeyer at nic.fr
Wed Jul 2 11:46:17 UTC 2014

On Wed, Jul 02, 2014 at 12:08:36PM +0100,
 Tony Finch <dot at dotat.at> wrote 
 a message of 25 lines which said:

> Your DS record doesn't match your DNSKEY records.

The OP could also use the excellent DNSviz:


which rightly says:

gu.edu/DNSKEY:DS RRs exist for algorithm(s) 7 in the edu zone, but no matching DNSKEYs of algorithm(s) 7 were used to sign the gu.edu DNSKEY RRset.

More information about the dns-operations mailing list