<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks! That is helpful - I haven't seen Deckard. </div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
We are revisiting our testing environment for an authoritative implementation.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Bill</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Hunts Chen <hunts@cloudflare.com><br>
<b>Sent:</b> April 17, 2024 13:50<br>
<b>To:</b> Bill Snow <Bill.Snow@vercara.com><br>
<b>Cc:</b> dns-operations@lists.dns-oarc.net <dns-operations@lists.dns-oarc.net><br>
<b>Subject:</b> Re: [dns-operations] DNSSEC test data sets</font>
<div> </div>
</div>
<div>
<div dir="ltr">Hi Bill,
<div><br>
</div>
<div> Are you testing an authoritative nameserver implementation or a recursive resolver that validates DNSSEC? You may like to take a look at the deckard test suite:
<a href="https://github.com/CZ-NIC/deckard/tree/master/sets" originalsrc="https://github.com/CZ-NIC/deckard/tree/master/sets" shash="IsTsds2OA5fr767YODtEsnHcOWTa4tC6fJQH+txjPGjayL/bMEkdYzUHPmIpzRJr5Lj3YObGJ+4pbUVl9+Eq15KQoghYINtkutQHgr+PFbPv46sJy0y0++IKfYnsSHfnPRy6PMLyO5fJLLQpXFXFqMe48OYlXVfIdwMiNKKlTZI=">
https://github.com/CZ-NIC/deckard/tree/master/sets</a></div>
</div>
<br>
<div class="x_gmail_quote">
<div dir="ltr" class="x_gmail_attr">On Wed, Apr 17, 2024 at 9:45 AM Bill Snow via dns-operations <<a href="mailto:dns-operations@dns-oarc.net">dns-operations@dns-oarc.net</a>> wrote:<br>
</div>
<blockquote class="x_gmail_quote" style="margin:0px 0px 0px 0.8ex; border-left:1px solid rgb(204,204,204); padding-left:1ex">
<div class="x_msg4859425470637438255"><br>
<br>
<br>
---------- Forwarded message ----------<br>
From: Bill Snow <<a href="mailto:Bill.Snow@vercara.com" target="_blank">Bill.Snow@vercara.com</a>><br>
To: "<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a>" <<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a>><br>
Cc: <br>
Bcc: <br>
Date: Wed, 17 Apr 2024 15:31:41 +0000<br>
Subject: DNSSEC test data sets<br>
<div dir="ltr">
<div style="direction:ltr; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:black">
<br>
</div>
<div style="direction:ltr; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:black">
Does anyone have any interesting insight on DNSSEC implementation test cases? </div>
<div style="direction:ltr; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:black">
<br>
</div>
<div style="direction:ltr; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:black">
You would think there would be some standard test data sets or test cases that one could implement against, but I don't know of any. I feel like somebody talked about this at some point, but I can't find anything.</div>
<div style="direction:ltr; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:black">
<br>
</div>
<div style="direction:ltr; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:black">
Thanks! Hope you are well,</div>
<div style="direction:ltr; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:black">
<br>
</div>
<div style="direction:ltr; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:black">
Bill</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
</div>
<br>
<br>
<br>
---------- Forwarded message ----------<br>
From: Bill Snow via dns-operations <<a href="mailto:dns-operations@dns-oarc.net" target="_blank">dns-operations@dns-oarc.net</a>><br>
To: "<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a>" <<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a>><br>
Cc: <br>
Bcc: <br>
Date: Wed, 17 Apr 2024 15:31:41 +0000<br>
Subject: [dns-operations] DNSSEC test data sets<br>
_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" originalsrc="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" shash="w+lEPKB748L9moqQai+H1M/Ps8qveN/JLsbzgAHe0f1R/d2k5xoSyCtsR8hOKI4HuV96LjCE/qrvhehW49MHy0J856PIJSYVF9iteiPCQZ0ZzLpoFZ6do2LfnwQAMJeIBo8DB9yPIm2um1qvzUvcVWBm3yBeMaWxUfiKkSdaOAE=" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br>
</div>
</blockquote>
</div>
<br clear="all">
<div><br>
</div>
<span class="x_gmail_signature_prefix">-- </span><br>
<div dir="ltr" class="x_gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<p style="font-family:Helvetica; font-size:12px; color:rgb(64,64,64)"><br>
</p>
<p style="font-family:Helvetica; font-size:12px; color:rgb(64,64,64)"><b>Hunts Chen</b> | Systems Engineer<br>
<a href="mailto:youremail@cloudflare.com" target="_blank" style="color:rgb(47,123,191)">hunts@cloudflare.com</a><br>
cell: <a href="tel:+16268980153" target="_blank" style="color:rgb(47,123,191)">+1 (626) 898-0153</a><br>
Kirkland, WA</p>
<a href="https://www.cloudflare.com/" originalsrc="https://www.cloudflare.com/" shash="BQHOF61M69wF06phPgdNIoWemur1fy2RONhQhhO/9ZXzWKKEH8R5EVmBha5m8OyEYiPh7yJSAsYestDSfeTVbhM8xaaZ3XxumEdtAg6L3jxsfsOLg3XERwmmZ7IhXJmqVK+59SWgcycxwZjLMV35FTm3/z/pn8aF+Ds1ZcLAa+4=" target="_blank" style="font-family:Times; font-size:medium">
<div style="background-image:url("https://www.cloudflare.com/img/signature-cloud.png"); width:200px; height:30px; margin-right:20px; margin-top:20px">
</div>
</a>
<p style="font-family:Helvetica; font-size:12px; color:rgb(64,64,64)">1 888 99 FLARE | <a href="https://www.cloudflare.com/" originalsrc="https://www.cloudflare.com/" shash="ujnHNpHJrxcVdWqHLVcdW4kMWz9ptieizkLmV/LULGVjn4o7i/5zX0zkI8tPB+rAHukDq1OFJkoK+cHc2MQho5yP/KGJ+PG4dFHYhLuElLdvJ0sxFTcslbQ69vkMU9/lT8kRoMF1geYGfUTVcvBLiKQvWlMb0d+opyio1Cyy7NQ=" target="_blank" style="color:rgb(47,123,191)">www.cloudflare.com</a></p>
</div>
</div>
</div>
</div>
</div>
</div>
<table border="0" cellspacing="0" cellpadding="0" align="left" width="`"100%`"">
<tbody>
<tr>
<td style="background:#bba555; padding:5.25pt 5.5pt 5.25pt 1.5pt"></td>
<td width="`"100%`"" cellpadding="`"7px" color="`"#212121`"" style="width:100.0%; background:#ffe599; padding:5.25pt
3.75pt 5.25pt 11.25pt; word-wrap:break-word">
<div>
<p><span style="font-size:11pt; font-family:Arial,sans-serif; color:#212121"><b>CAUTION:</b> This Email is from an EXTERNAL source. Ensure you trust this sender before clicking on any links or attachments. If you have any concerns about the content of this
message, press the "Phish Alert" button in Outlook or forward to cirt@vercara.com
</span></p>
</div>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>