bbc.co.uk | DNSViz

bbc.co.uk

Updated: 2020-08-30 14:19:55 UTC (1522 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Ignore RFC 8624:
|?| Ignore RFC 9276:
|?| Multi-signer:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Insecure (6)

bbc.co.uk/A
bbc.co.uk/AAAA
bbc.co.uk/MX
bbc.co.uk/NS
bbc.co.uk/SOA
bbc.co.uk/TXT

Secure (1)

co.uk/SOA

DNSKEY/DS/NSEC status

Secure (8)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 46594)
NSEC3 proving non-existence of bbc.co.uk/DS
co.uk/DNSKEY (alg 8, id 33621)
co.uk/DS (alg 8, id 33621)
uk/DNSKEY (alg 8, id 43056)
uk/DNSKEY (alg 8, id 43876)
uk/DS (alg 8, id 43876)

Delegation status

Insecure (1)

co.uk to bbc.co.uk

Secure (2)

. to uk
uk to co.uk

Notices

Errors (2)

co.uk zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (43.230.48.1, 213.248.220.1, 2401:fd80:404::1, 2a01:618:404::1)
uk zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (43.230.48.1, 213.248.220.1, 2401:fd80:404::1, 2a01:618:404::1)

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

See also

DNSSEC Debugger by Verisign Labs.

Download: png | svg

Warning

JavaScript is required to make the graph below interactive.

DNSSEC authentication graph