gov to brain.gov: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (128.231.64.1, 128.231.128.251, 165.112.4.230, 2607:f220:402:1801::a570:4e6, 2607:f220:404:101::80e7:80fb, 2607:f220:418:4101::80e7:401, TCP_-_EDNS0_4096_D_KN)
gov to brain.gov: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. (128.231.64.1, 128.231.128.251, 165.112.4.230, 2607:f220:402:1801::a570:4e6, 2607:f220:404:101::80e7:80fb, 2607:f220:418:4101::80e7:401, TCP_-_EDNS0_4096_D_KN)
Warnings (8)
brain.gov/DS (alg 8, id 61810): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
brain.gov/DS (alg 8, id 61810): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
brain.gov/DS (alg 8, id 61810): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
brain.gov/DS (alg 8, id 61810): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
gov to brain.gov: Authoritative AAAA records exist for ns.nih.gov, but there are no corresponding AAAA glue records.
gov to brain.gov: Authoritative AAAA records exist for ns2.nih.gov, but there are no corresponding AAAA glue records.
gov to brain.gov: Authoritative AAAA records exist for ns3.nih.gov, but there are no corresponding AAAA glue records.
gov/DNSKEY (alg 8, id 40921): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (69.36.153.30, 69.36.157.30, 81.19.194.30, 209.112.123.30, 2001:500:4431::2:30, 2620:74:27::2:30, 2620:74:28::2:30, 2620:74:29::2:30, TCP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN)