bbc.co.uk | DNSViz

bbc.co.uk

Updated: 2024-10-25 06:30:41 UTC (35 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Ignore RFC 8624:
|?| Ignore RFC 9276:
|?| Multi-signer:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Insecure (6)

bbc.co.uk/A
bbc.co.uk/AAAA
bbc.co.uk/MX
bbc.co.uk/NS
bbc.co.uk/SOA
bbc.co.uk/TXT

Secure (3)

co.uk/SOA
co.uk/SOA
co.uk/SOA

DNSKEY/DS/NSEC status

Secure (8)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 61050)
NSEC3 proving non-existence of bbc.co.uk/DS
co.uk/DNSKEY (alg 8, id 33621)
co.uk/DS (alg 8, id 33621)
uk/DNSKEY (alg 8, id 43056)
uk/DNSKEY (alg 8, id 43876)
uk/DS (alg 8, id 43876)

Delegation status

Insecure (1)

co.uk to bbc.co.uk

Secure (2)

. to uk
uk to co.uk

Notices

Warnings (2)

./DNSKEY (alg 8, id 20326): The server appears to support DNS cookies but did not return a COOKIE option. See RFC 7873, Sec. 5.2.3. (2001:500:2f::f, UDP_-_EDNS0_4096_D_KN)
./DNSKEY (alg 8, id 61050): The server appears to support DNS cookies but did not return a COOKIE option. See RFC 7873, Sec. 5.2.3. (2001:500:2f::f, UDP_-_EDNS0_4096_D_KN)

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

See also

DNSSEC Debugger by Verisign Labs.

Download: png | svg

Warning

JavaScript is required to make the graph below interactive.

DNSSEC authentication graph