dot.gov
Updated:
2020-11-21 13:48:06 UTC (1466 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Secure (6)
- dot.gov/A
- dot.gov/MX
- dot.gov/NS
- dot.gov/SOA
- dot.gov/SOA
- dot.gov/TXT
DNSKEY/DS/NSEC status
Secure (15)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 26116)
- dot.gov/DNSKEY (alg 8, id 18738)
- dot.gov/DNSKEY (alg 8, id 25011)
- dot.gov/DNSKEY (alg 8, id 29748)
- dot.gov/DNSKEY (alg 8, id 49516)
- dot.gov/DNSKEY (alg 8, id 54562)
- dot.gov/DS (alg 8, id 49516)
- dot.gov/DS (alg 8, id 49516)
- dot.gov/DS (alg 8, id 54562)
- dot.gov/DS (alg 8, id 54562)
- gov/DNSKEY (alg 8, id 15489)
- gov/DNSKEY (alg 8, id 7698)
- gov/DS (alg 8, id 7698)
- gov/DS (alg 8, id 7698)
Delegation status
Secure (2)
- . to gov
- gov to dot.gov
Notices
Errors (6)
- dot.gov/DNSKEY (alg 8, id 25011): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (204.68.194.100, 204.68.194.200, 2001:19e8:d::100, 2001:19e8:d::200, UDP_-_EDNS0_4096_D_K)
- dot.gov/DNSKEY (alg 8, id 29748): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (204.152.44.100, 2001:19e8:d4::100, UDP_-_EDNS0_4096_D_K)
- dot.gov/DNSKEY (alg 8, id 54562): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (204.68.194.100, 204.68.194.200, 2001:19e8:d::100, 2001:19e8:d::200, UDP_-_EDNS0_4096_D_K)
- q91zsokufh.dot.gov/A has errors; select the "Denial of existence" DNSSEC option to see them.
- dot.gov/AAAA has errors; select the "Denial of existence" DNSSEC option to see them.
- dot.gov/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (19)
- dot.gov/DNSKEY (alg 8, id 18738): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (204.152.44.100, 2001:19e8:d4::100, UDP_-_EDNS0_4096_D_K)
- dot.gov/DS (alg 8, id 49516): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- dot.gov/DS (alg 8, id 49516): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- dot.gov/DS (alg 8, id 49516): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
- dot.gov/DS (alg 8, id 49516): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
- dot.gov/DS (alg 8, id 54562): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- dot.gov/DS (alg 8, id 54562): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- dot.gov/DS (alg 8, id 54562): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
- dot.gov/DS (alg 8, id 54562): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
- gov to dot.gov: Authoritative AAAA records exist for edns1.dot.gov, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
- gov to dot.gov: Authoritative AAAA records exist for edns2.dot.gov, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
- gov to dot.gov: Authoritative AAAA records exist for edns3.dot.gov, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
- gov/DS (alg 8, id 7698): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- gov/DS (alg 8, id 7698): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- gov/DS (alg 8, id 7698): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
- gov/DS (alg 8, id 7698): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
- q91zsokufh.dot.gov/A has warnings; select the "Denial of existence" DNSSEC option to see them.
- dot.gov/AAAA has warnings; select the "Denial of existence" DNSSEC option to see them.
- dot.gov/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
