comunesbt.it
Updated:
2024-10-09 21:04:23 UTC (74 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Bogus (6)
- comunesbt.it/A
- comunesbt.it/MX
- comunesbt.it/NS
- comunesbt.it/NSEC3PARAM
- comunesbt.it/SOA
- comunesbt.it/TXT
DNSKEY/DS/NSEC status
Bogus (2)
- comunesbt.it/DNSKEY (alg 14, id 23939)
- comunesbt.it/DNSKEY (alg 14, id 43753)
Secure (7)
- ./DNSKEY (alg 8, id 20038)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 61050)
- comunesbt.it/DS (alg 14, id 348)
- it/DNSKEY (alg 10, id 18395)
- it/DNSKEY (alg 10, id 41901)
- it/DS (alg 10, id 41901)
Non_existent (1)
- comunesbt.it/DNSKEY (alg 14, id 348)
Delegation status
Bogus (1)
- it to comunesbt.it
Secure (1)
- . to it
Notices
Errors (2)
- it to comunesbt.it: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (54.93.203.146, 185.5.201.53, 185.5.202.53, 2a02:cdc5:9715:0:185:5:201:53, 2a02:cdc6:3100:0:185:5:202:53, 2a05:d014:499:9c00:582a:ca59:9fb0:4ee5, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
- it to comunesbt.it: The DS RRset for the zone included algorithm 14 (ECDSAP384SHA384), but no DS RR matched a DNSKEY with algorithm 14 that signs the zone's DNSKEY RRset. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (54.93.203.146, 185.5.201.53, 185.5.202.53, 2a02:cdc5:9715:0:185:5:201:53, 2a02:cdc6:3100:0:185:5:202:53, 2a05:d014:499:9c00:582a:ca59:9fb0:4ee5, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
Warnings (6)
- RRSIG comunesbt.it/DS alg 10, id 18395: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
- RRSIG it/DNSKEY alg 10, id 18395: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
- RRSIG it/DNSKEY alg 10, id 18395: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
- RRSIG it/DNSKEY alg 10, id 41901: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
- RRSIG it/DNSKEY alg 10, id 41901: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
- comunesbt.it/DS has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
