epd.gov.hk

Updated: 2023-03-22 05:26:40 UTC (464 days ago) Go to most recent »

DNSSEC options (hide)

Notices

DNSSEC Authentication Chain

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 951)
epd.gov.hk/DS (alg 8, id 8446)
gov.hk/DNSKEY (alg 8, id 14464)
gov.hk/DNSKEY (alg 8, id 35104)
gov.hk/DNSKEY (alg 8, id 58207)
gov.hk/DNSKEY (alg 8, id 59628)
gov.hk/DS (alg 8, id 14464)
hk/DNSKEY (alg 8, id 26556)
hk/DNSKEY (alg 8, id 34911)
hk/DNSKEY (alg 8, id 46912)
hk/DNSKEY (alg 8, id 859)
hk/DS (alg 8, id 859)

epd.gov.hk zone: The following NS name(s) did not resolve to address(es): ns21.hk.net, ns22.hk.net, ns31.hk.net, ns32.hk.net
epd.gov.hk/DS (alg 8, id 8446): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
epd.gov.hk/DS (alg 8, id 8446): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
gov.hk to epd.gov.hk: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11.

epd.gov.hk zone: No IPv4 addresses were found for NS records in the parent or child zone.
epd.gov.hk/DS (alg 8, id 8446): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
epd.gov.hk/DS (alg 8, id 8446): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.