integrity.gov
Updated:
2022-04-27 12:06:15 UTC (738 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Secure (6)
- integrity.gov/A
- integrity.gov/MX
- integrity.gov/NS
- integrity.gov/NSEC3PARAM
- integrity.gov/SOA
- integrity.gov/TXT
DNSKEY/DS/NSEC status
Secure (12)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 47671)
- gov/DNSKEY (alg 8, id 2706)
- gov/DNSKEY (alg 8, id 7698)
- gov/DS (alg 8, id 7698)
- integrity.gov/DNSKEY (alg 10, id 11913)
- integrity.gov/DNSKEY (alg 10, id 7014)
- integrity.gov/DNSKEY (alg 10, id 7688)
- integrity.gov/DS (alg 10, id 11913)
- integrity.gov/DS (alg 10, id 11913)
- integrity.gov/DS (alg 10, id 7014)
- integrity.gov/DS (alg 10, id 7014)
Delegation status
Secure (2)
- . to gov
- gov to integrity.gov
Notices
Errors (1)
- gov/DS: No response was received from the server over UDP (tried 12 times). (192.36.148.17, UDP_-_NOEDNS_)
Warnings (23)
- RRSIG integrity.gov/A alg 10, id 7688: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/DNSKEY alg 10, id 11913: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/DNSKEY alg 10, id 11913: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/DNSKEY alg 10, id 11913: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/DNSKEY alg 10, id 7014: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/DNSKEY alg 10, id 7014: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/DNSKEY alg 10, id 7014: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/DNSKEY alg 10, id 7688: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/DNSKEY alg 10, id 7688: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/DNSKEY alg 10, id 7688: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/MX alg 10, id 7688: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/NS alg 10, id 7688: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/NSEC3PARAM alg 10, id 7688: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/SOA alg 10, id 7688: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- RRSIG integrity.gov/TXT alg 10, id 7688: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
- integrity.gov/DS (alg 10, id 11913): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- integrity.gov/DS (alg 10, id 11913): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- integrity.gov/DS (alg 10, id 11913): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
- integrity.gov/DS (alg 10, id 11913): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
- integrity.gov/DS (alg 10, id 7014): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- integrity.gov/DS (alg 10, id 7014): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- integrity.gov/DS (alg 10, id 7014): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
- integrity.gov/DS (alg 10, id 7014): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
JavaScript is required to make the graph below interactive.
