NSEC3 proving non-existence of foiaonline.gov/DS: An iterations count of 0 must be used in NSEC3 records to alleviate computational burdens. See RFC 9276, Sec. 3.1.
NSEC3 proving non-existence of foiaonline.gov/DS: An iterations count of 0 must be used in NSEC3 records to alleviate computational burdens. See RFC 9276, Sec. 3.1.
RRSIG foiaonline.gov/DNSKEY alg 8, id 59026: With a TTL of 1296000 the RRSIG RR can be in the cache of a non-validating resolver until 7 days after it expires at 2021-08-04 16:23:42+00:00. See RFC 4035, Sec. 5.3.3.
gmwhaqd964.foiaonline.gov/A has errors; select the "Denial of existence" DNSSEC option to see them.
foiaonline.gov/DS has errors; select the "Denial of existence" DNSSEC option to see them.
foiaonline.gov/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
foiaonline.gov/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
foiaonline.gov/MX has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (6)
NSEC3 proving non-existence of foiaonline.gov/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
NSEC3 proving non-existence of foiaonline.gov/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
gmwhaqd964.foiaonline.gov/A has warnings; select the "Denial of existence" DNSSEC option to see them.
foiaonline.gov/DS has warnings; select the "Denial of existence" DNSSEC option to see them.
foiaonline.gov/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
foiaonline.gov/MX has warnings; select the "Denial of existence" DNSSEC option to see them.