[dns-operations] Test Zone Metalist

[Shumon Huque]

On Thu, Jun 4, 2020 at 10:05 AM Matthew Pounsett <matt at dns-oarc.net> wrote:

> On the suggestion of some community members, I’m considering setting up a
> list of known DNS test zones to be posted on OARC’s web site.  The list
> will include zones designed to provide data to use as input to DNS software.
>
> Off the top of my head, and with five minutes of googling, I know of only
> two:
>
> test.dnssec-tools.org <https://dnssec-tools.org/testzone/>
> workbench.sidnlabs.nl <https://workbench.sidnlabs.nl/>
>
> This seems to be one of those subjects that is hard to search; I’m mostly
> getting test *software* in my search results.
>
> What other zones should be on such a list?


Hi Matt,

These don't appear to be listed on the rootcanary project's website (
rootcanary.org), but Willem Toorop recently made me aware that they have a
set of DNSSEC test zones of the form "dNaNnN.rootcanary.net", where:

        dN: DS digest algorithm number
        aN: algorithm number
        nN: NSEC version (1 or 3)

So, the zone "d2a15n3.rootcanary.net" has a DS record with hash algorithm 2
(SHA256), is signed with algorithm 15 (EdDSA25519), and uses NSEC3, etc.

-- 
Shumon Huque
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20200606/d07fc42a/attachment.html>