[dns-operations] Verifying that a recursor is performing DNSSec validation

[Antoin Verschuren]

There are various signed and deliberately broken zones at SIDNLabs workbench with an explanation of the brokenness:
https://workbench.sidnlabs.nl/

- --
Antoin Verschuren

Tweevoren 6, 5672 SB Nuenen, NL
M: +31 6 37682392
xmpp:antoinverschuren at gmail.com




Op 21 jul. 2015, om 16:04 heeft Keith Mitchell <keith at dns-oarc.net> het volgende geschreven:

> On 07/21/2015 07:48 AM, Edward Lewis wrote:
>> Come to think of it, does DNS-OARC have a set of such zones?  I have a
>> vague memory that this may have been set up once.  If not, might this be a
>> good idea to provide?  (Alongside other test services like reply size as
>> described here: https://www.dns-oarc.net/oarc/services/replysizetest)
> 
> We have I recall various *signed* zones for testing, but not a
> deliberately-always-unsigned zone. We'd be happy to implement that if
> the community felt it useful.
> 
> Keith
> 
> 
>> (An idle suggestion.)
>> 
>> On 7/20/15, 22:13, "dns-operations on behalf of Frank Bulk"
>> <dns-operations-bounces at dns-oarc.net on behalf of frnkblk at iname.com> wrote:
>> 
>>> Does anyone have an zone that will always remain unsigned?
>>> verteiltesysteme.net is going to make one, but if there was a second
>>> organization that could provide a zone that will never be signed, that
>>> would be great as a control.
> 
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20150721/c0144f95/attachment.sig>