[dns-operations] Verifying that a recursor is performing DNSSec validation

Frank Bulk frnkblk at iname.com
Tue Jul 14 05:08:08 UTC 2015

Is there an existing tool, ideally a NAGIOS-friendly one, that performs a
check against a resolver that it gets an AD back on DNSSec query for a zone
that is properly signed, failure for one that is not properly signed, and
nothing for one that isn't signed?

I'd rather not re-invent the wheel if it already exists.


Frank Bulk

More information about the dns-operations mailing list