beauty
Updated:
2020-09-22 13:10:31 UTC (1520 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Bogus (2)
- beauty/NS
- beauty/SOA
DNSKEY/DS/NSEC status
Secure (5)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 26116)
- ./DNSKEY (alg 8, id 46594)
- beauty/DS (alg 8, id 35340)
- beauty/DS (alg 8, id 52406)
Non_existent (2)
- beauty/DNSKEY (alg 8, id 35340)
- beauty/DNSKEY (alg 8, id 52406)
Delegation status
Bogus (1)
- . to beauty
Notices
Errors (7)
- . to beauty: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (185.24.64.119, 194.169.218.119, 212.18.248.119, 212.18.249.119, 2001:67c:13cc::1:119, 2a04:2b00:13cc::1:119, 2a04:2b00:13ee::119, 2a04:2b00:13ff::119, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
- . to beauty: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (185.24.64.119, 194.169.218.119, 212.18.248.119, 212.18.249.119, 2001:67c:13cc::1:119, 2a04:2b00:13cc::1:119, 2a04:2b00:13ee::119, 2a04:2b00:13ff::119, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
- beauty/NS: No RRSIG covering the RRset was returned in the response. See RFC 4035, Sec. 3.1.1. (185.24.64.119, 194.169.218.119, 212.18.248.119, 212.18.249.119, 2001:67c:13cc::1:119, 2a04:2b00:13cc::1:119, 2a04:2b00:13ee::119, 2a04:2b00:13ff::119, UDP_-_EDNS0_4096_D_K)
- beauty/SOA: No RRSIG covering the RRset was returned in the response. See RFC 4035, Sec. 3.1.1. (185.24.64.119, 194.169.218.119, 212.18.248.119, 212.18.249.119, 2001:67c:13cc::1:119, 2a04:2b00:13cc::1:119, 2a04:2b00:13ee::119, 2a04:2b00:13ff::119, TCP_-_EDNS0_4096_D, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_4096_D_K_0x20)
- beauty/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
- beauty/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
- 5or9s14tfc.beauty/A has errors; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
