freebsd.org
Updated:
2020-10-15 08:36:26 UTC (1505 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Secure (6)
- freebsd.org/A
- freebsd.org/AAAA
- freebsd.org/MX
- freebsd.org/NS
- freebsd.org/SOA
- freebsd.org/TXT
DNSKEY/DS/NSEC status
Secure (10)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 26116)
- freebsd.org/DNSKEY (alg 8, id 2520)
- freebsd.org/DNSKEY (alg 8, id 26835)
- freebsd.org/DNSKEY (alg 8, id 32359)
- freebsd.org/DS (alg 8, id 32359)
- org/DNSKEY (alg 7, id 22064)
- org/DNSKEY (alg 8, id 26974)
- org/DNSKEY (alg 8, id 63858)
- org/DS (alg 8, id 26974)
Delegation status
Secure (2)
- . to org
- org to freebsd.org
Notices
Errors (2)
- cn6smzd7la.freebsd.org/A has errors; select the "Denial of existence" DNSSEC option to see them.
- freebsd.org/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (7)
- RRSIG freebsd.org/DS alg 7, id 22064: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG org/DNSKEY alg 7, id 22064: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG org/DNSKEY alg 7, id 22064: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG org/DNSKEY alg 7, id 22064: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- cn6smzd7la.freebsd.org/A has warnings; select the "Denial of existence" DNSSEC option to see them.
- freebsd.org/DS has warnings; select the "Denial of existence" DNSSEC option to see them.
- freebsd.org/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
