defcon.org
Updated:
2021-12-02 03:09:51 UTC (874 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Secure (7)
- defcon.org/A
- defcon.org/AAAA
- defcon.org/MX
- defcon.org/NS
- defcon.org/NSEC3PARAM
- defcon.org/SOA
- defcon.org/TXT
DNSKEY/DS/NSEC status
Secure (11)
- ./DNSKEY (alg 8, id 14748)
- ./DNSKEY (alg 8, id 20326)
- defcon.org/DNSKEY (alg 14, id 12256)
- defcon.org/DNSKEY (alg 14, id 55751)
- defcon.org/DS (alg 10, id 38292)
- defcon.org/DS (alg 10, id 50153)
- defcon.org/DS (alg 14, id 55751)
- org/DNSKEY (alg 8, id 26974)
- org/DNSKEY (alg 8, id 63858)
- org/DNSKEY (alg 8, id 63966)
- org/DS (alg 8, id 26974)
Non_existent (2)
- defcon.org/DNSKEY (alg 10, id 38292)
- defcon.org/DNSKEY (alg 10, id 50153)
Delegation status
Secure (2)
- . to org
- org to defcon.org
Notices
Errors (10)
- defcon.org/A: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (50.230.231.67, 50.230.231.69, 64.87.1.238, 2001:559:327:231::67, 2001:559:327:231::69, 2600:4402:c004::3, UDP_-_EDNS0_4096_D_KN)
- defcon.org/AAAA: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (50.230.231.67, 50.230.231.69, 64.87.1.238, 2001:559:327:231::67, 2001:559:327:231::69, 2600:4402:c004::3, UDP_-_EDNS0_4096_D_KN)
- defcon.org/DNSKEY (alg 14, id 12256): The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (50.230.231.67, 50.230.231.69, 64.87.1.238, 2001:559:327:231::67, 2001:559:327:231::69, 2600:4402:c004::3, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
- defcon.org/DNSKEY (alg 14, id 55751): The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (50.230.231.67, 50.230.231.69, 64.87.1.238, 2001:559:327:231::67, 2001:559:327:231::69, 2600:4402:c004::3, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
- defcon.org/MX: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (50.230.231.67, 50.230.231.69, 64.87.1.238, 2001:559:327:231::67, 2001:559:327:231::69, 2600:4402:c004::3, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
- defcon.org/NS: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (50.230.231.67, 50.230.231.69, 64.87.1.238, 2001:559:327:231::67, 2001:559:327:231::69, 2600:4402:c004::3, UDP_-_EDNS0_4096_D_KN)
- defcon.org/NSEC3PARAM: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (50.230.231.67, 50.230.231.69, 64.87.1.238, 2001:559:327:231::67, 2001:559:327:231::69, 2600:4402:c004::3, UDP_-_EDNS0_4096_D_KN)
- defcon.org/SOA: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (50.230.231.67, 50.230.231.69, 64.87.1.238, 2001:559:327:231::67, 2001:559:327:231::69, 2600:4402:c004::3, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20, UDP_-_EDNS0_4096_D_N)
- defcon.org/TXT: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (50.230.231.67, 50.230.231.69, 64.87.1.238, 2001:559:327:231::67, 2001:559:327:231::69, 2600:4402:c004::3, UDP_-_EDNS0_4096_D_KN)
- org to defcon.org: The DS RRset for the zone included algorithm 10 (RSASHA512), but no DS RR matched a DNSKEY with algorithm 10 that signs the zone's DNSKEY RRset. (50.230.231.67, 50.230.231.69, 64.87.1.238, 2001:559:327:231::67, 2001:559:327:231::69, 2600:4402:c004::3, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
Warnings (2)
- defcon.org/SOA: No response was received from the server over UDP (tried 6 times) until the COOKIE EDNS option was removed (however, this server appeared to respond legitimately to other queries with the COOKIE EDNS option present). (50.230.231.69, UDP_-_EDNS0_4096_D_KN)
- defcon.org/SOA: No response was received from the server over UDP (tried 7 times) until the NSID EDNS option was removed (however, this server appeared to respond legitimately to other queries with the NSID EDNS option present). (64.87.1.238, UDP_-_EDNS0_4096_D_KN)
JavaScript is required to make the graph below interactive.
