bailemos.online

Updated: 2022-12-19 13:59:55 UTC (504 days ago) Update now

DNSSEC options (hide)

Notices

DNSSEC Authentication Chain

./DNSKEY (alg 8, id 18733)
./DNSKEY (alg 8, id 20326)
bailemos.online/DS (alg 13, id 27054)
online/DNSKEY (alg 8, id 303)
online/DNSKEY (alg 8, id 4267)
online/DS (alg 8, id 4267)
online/DS (alg 8, id 4267)

online to bailemos.online: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (108.162.194.88, 108.162.195.70, 162.159.38.88, 162.159.44.70, 172.64.34.88, 172.64.35.70, 2606:4700:50::a29f:2658, 2606:4700:58::a29f:2c46, 2803:f800:50::6ca2:c258, 2803:f800:50::6ca2:c346, 2a06:98c1:50::ac40:2258, 2a06:98c1:50::ac40:2346, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
online to bailemos.online: The DS RRset for the zone included algorithm 13 (ECDSAP256SHA256), but no DS RR matched a DNSKEY with algorithm 13 that signs the zone's DNSKEY RRset. (108.162.194.88, 108.162.195.70, 162.159.38.88, 162.159.44.70, 172.64.34.88, 172.64.35.70, 2606:4700:50::a29f:2658, 2606:4700:58::a29f:2c46, 2803:f800:50::6ca2:c258, 2803:f800:50::6ca2:c346, 2a06:98c1:50::ac40:2258, 2a06:98c1:50::ac40:2346, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)

online/DS (alg 8, id 4267): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
online/DS (alg 8, id 4267): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
online/DS (alg 8, id 4267): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
online/DS (alg 8, id 4267): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.