RRSIG defcon.org/A alg 10, id 50153: With a TTL of 2419200 the RRSIG RR can be in the cache of a non-validating resolver until 19 days after it expires at 2021-02-18 05:12:31+00:00.
RRSIG defcon.org/AAAA alg 10, id 50153: With a TTL of 2419200 the RRSIG RR can be in the cache of a non-validating resolver until 19 days after it expires at 2021-02-18 05:12:31+00:00.
RRSIG defcon.org/MX alg 10, id 50153: With a TTL of 2419200 the RRSIG RR can be in the cache of a non-validating resolver until 19 days after it expires at 2021-02-18 05:12:31+00:00.
RRSIG defcon.org/NS alg 10, id 50153: With a TTL of 2419200 the RRSIG RR can be in the cache of a non-validating resolver until 19 days after it expires at 2021-02-18 05:12:31+00:00.
RRSIG defcon.org/TXT alg 10, id 50153: With a TTL of 2419200 the RRSIG RR can be in the cache of a non-validating resolver until 19 days after it expires at 2021-02-18 05:12:31+00:00.
Warnings (14)
RRSIG defcon.org/A alg 10, id 50153: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG defcon.org/AAAA alg 10, id 50153: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG defcon.org/DNSKEY alg 10, id 38292: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG defcon.org/DNSKEY alg 10, id 38292: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG defcon.org/DNSKEY alg 10, id 50153: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG defcon.org/DNSKEY alg 10, id 50153: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG defcon.org/MX alg 10, id 50153: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG defcon.org/NS alg 10, id 50153: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG defcon.org/SOA alg 10, id 50153: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG defcon.org/TXT alg 10, id 50153: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
defcon.org/DNSKEY (alg 10, id 38292): No response was received from the server over UDP (tried 7 times) until the NSID EDNS option was removed (however, this server appeared to respond legitimately to other queries with the NSID EDNS option present). (50.230.231.69, UDP_-_EDNS0_4096_D_KN)
defcon.org/DNSKEY (alg 10, id 38292): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. (2001:559:327:231::69, UDP_-_EDNS0_4096_D_KN)
defcon.org/DNSKEY (alg 10, id 50153): No response was received from the server over UDP (tried 7 times) until the NSID EDNS option was removed (however, this server appeared to respond legitimately to other queries with the NSID EDNS option present). (50.230.231.69, UDP_-_EDNS0_4096_D_KN)
defcon.org/DNSKEY (alg 10, id 50153): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. (2001:559:327:231::69, UDP_-_EDNS0_4096_D_KN)