[dns-operations] Trouble with qa.ws.igt.fiscal.treasury.gov

Casey Deccio casey at deccio.net
Tue Oct 18 20:29:57 UTC 2022


> On Oct 18, 2022, at 1:58 PM, Mark Andrews <marka at isc.org> wrote:
> 
> Not for DS  as it is part of the parent zone. 
> 

Right.  What I meant (but didn't say) was this:

The following is a query for testing for the presence of a DS record in the igt.fiscal.treasury.gov zone.  The signer for the records in the response should be the parent zone of igt.fiscal.treasury.gov, which is fiscal.treasury.gov.  However, the the signer for the records in the observed response is treasury.gov.

$ dig +dnssec @ns1.treasury.gov igt.fiscal.treasury.gov ds | awk '$4 == "RRSIG" { print $12 }'
treasury.gov.
treasury.gov.

Casey



More information about the dns-operations mailing list