[dns-operations] Missing algorithm 8 signatures in .museum zone
Viktor Dukhovni
ietf-dane at dukhovni.org
Thu Nov 16 06:20:30 UTC 2017
The .museum zone has algorithm 8 and 10 DS and DNSKEY RRs, but
some records are signed with just algorithm 10:
http://dnsviz.net/d/ww2.dsm.museum/Wg0sRQ/dnssec/
@d.nic.fr.[194.0.9.1]
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38522
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1
;dsm.museum. IN DS
museum. SOA a.nic.fr. ...
museum. RRSIG SOA 10 1 ...
7fe0d5i1il7eoprub8q9t7cn5jghdm73.museum. NSEC3 1 1 1 B66887C4 ...
7fe0d5i1il7eoprub8q9t7cn5jghdm73.museum. RRSIG NSEC3 10 2 ...
@f.ext.nic.fr.[194.146.106.46]
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60958
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1
;dsm.museum. IN DS
7FE0D5I1IL7EOPRUB8Q9T7CN5JGHDM73.museum. NSEC3 1 1 1 B66887C4
7FE0D5I1IL7EOPRUB8Q9T7CN5JGHDM73.museum. RRSIG NSEC3 10 2 ...
museum. SOA a.nic.fr. ...
museum. RRSIG SOA 10 1 ...
@g.ext.nic.fr.[194.0.36.1]
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56321
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1
;dsm.museum. IN DS
7FE0D5I1IL7EOPRUB8Q9T7CN5JGHDM73.museum. NSEC3 1 1 1 B66887C4 ...
7FE0D5I1IL7EOPRUB8Q9T7CN5JGHDM73.museum. RRSIG NSEC3 10 2 ...
museum. SOA a.nic.fr. ...
museum. RRSIG SOA 10 1 ...
--
Viktor.
More information about the dns-operations
mailing list