doc.gov
Updated:
2020-03-19 10:35:03 UTC (1509 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Secure (6)
- doc.gov/A
- doc.gov/AAAA
- doc.gov/MX
- doc.gov/NS
- doc.gov/SOA
- doc.gov/TXT
DNSKEY/DS/NSEC status
Secure (14)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 33853)
- doc.gov/DNSKEY (alg 8, id 25645)
- doc.gov/DNSKEY (alg 8, id 43581)
- doc.gov/DNSKEY (alg 8, id 49326)
- doc.gov/DNSKEY (alg 8, id 51729)
- doc.gov/DNSKEY (alg 8, id 63168)
- doc.gov/DNSKEY (alg 8, id 93)
- doc.gov/DS (alg 8, id 25645)
- doc.gov/DS (alg 8, id 25645)
- gov/DNSKEY (alg 8, id 36558)
- gov/DNSKEY (alg 8, id 7698)
- gov/DS (alg 8, id 7698)
- gov/DS (alg 8, id 7698)
Delegation status
Secure (2)
- . to gov
- gov to doc.gov
Notices
Errors (14)
- doc.gov zone: The server(s) responded over UDP with a malformed response or with an invalid RCODE. (170.110.225.13)
- doc.gov zone: The server(s) were not responsive to queries over UDP. (170.110.225.11, 2001:49f0:d064:6:1000::238)
- doc.gov/A: DNSSEC was effectively downgraded because no response was received from the server over UDP (tried 10 times) with the DO bit set. (170.110.225.16, UDP_-_EDNS0_4096_)
- doc.gov/A: No response was received from the server over UDP (tried 10 times) until the DO EDNS flag was cleared (however, this server appeared to respond legitimately to other queries with the DO EDNS flag set). (170.110.225.16, UDP_-_EDNS0_4096_D_K)
- doc.gov/A: No response was received from the server over UDP (tried 12 times). (170.110.225.11, 170.110.225.13, 2001:49f0:d064:6:1000::238, UDP_-_NOEDNS_)
- doc.gov/A: The DNSSEC records necessary to validate the response could not be retrieved from the server. (170.110.225.16, UDP_-_EDNS0_4096_D_K)
- doc.gov/AAAA: No response was received from the server over UDP (tried 12 times). (170.110.225.13, UDP_-_NOEDNS_)
- doc.gov/DNSKEY: No response was received from the server over UDP (tried 12 times). (170.110.225.13, UDP_-_NOEDNS_)
- doc.gov/DNSKEY: No response was received from the server over UDP (tried 4 times). (170.110.225.13, UDP_-_EDNS0_512_D_K)
- doc.gov/MX: No response was received from the server over UDP (tried 12 times). (170.110.225.13, UDP_-_NOEDNS_)
- doc.gov/MX: No response was received from the server over UDP (tried 4 times). (170.110.225.13, UDP_-_EDNS0_512_D_K)
- doc.gov/NS: No response was received from the server over UDP (tried 12 times). (170.110.225.11, 170.110.225.16, 2001:49f0:d064:6:1000::238, UDP_-_NOEDNS_)
- doc.gov/SOA: No response was received from the server over UDP (tried 12 times). (170.110.225.13, UDP_-_NOEDNS_, UDP_-_NOEDNS__0x20)
- doc.gov/TXT: No response was received from the server over UDP (tried 12 times). (170.110.225.13, UDP_-_NOEDNS_)
Warnings (11)
- doc.gov/DS (alg 8, id 25645): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- doc.gov/DS (alg 8, id 25645): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- doc.gov/DS (alg 8, id 25645): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
- doc.gov/DS (alg 8, id 25645): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
- gov to doc.gov: Authoritative AAAA records exist for gpaens2.doc.gov, but there are no corresponding AAAA glue records.
- gov to doc.gov: Authoritative AAAA records exist for hchbens1.doc.gov, but there are no corresponding AAAA glue records.
- gov to doc.gov: The following NS name(s) were found in the delegation NS RRset (i.e., in the gov zone), but not in the authoritative NS RRset: hchbens2.doc.gov
- gov/DS (alg 8, id 7698): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- gov/DS (alg 8, id 7698): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- gov/DS (alg 8, id 7698): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
- gov/DS (alg 8, id 7698): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
JavaScript is required to make the graph below interactive.
