[dns-operations] Verifying that a recursor is performing DNSSec validation

Tue Jul 21 15:03:03 UTC 2015

On Tue, 21 Jul 2015 08:21:16 -0500 Frank wrote:
FB> Thanks.  I found three on the Internet that are set up that way:
FB>  sigfail.verteiltesysteme.net
FB>  www.dnssec-failed.org
FB>  rhybar.cz
FB> I'm using those in my script (randomly) for checking for that failure
FB> case.

The dnssec-tools test suite maintains a test zone with lots of records that
are broken in specific ways.

	https://www.dnssec-tools.org/testzone/

Robert

-- 
Senior Software Engineer @ Parsons
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20150721/62ebbb45/attachment.sig>