ownbay.net
Updated:
2021-11-18 20:39:12 UTC (893 days ago)
Update now
Notices
DNSSEC Authentication Chain
RRset status
Bogus (6)
- ownbay.net/A
- ownbay.net/MX
- ownbay.net/NS
- ownbay.net/NSEC3PARAM
- ownbay.net/SOA
- ownbay.net/TXT
DNSKEY/DS/NSEC status
Bogus (2)
- ownbay.net/DNSKEY (alg 7, id 53229)
- ownbay.net/DNSKEY (alg 7, id 9608)
Secure (7)
- ./DNSKEY (alg 8, id 14748)
- ./DNSKEY (alg 8, id 20326)
- net/DNSKEY (alg 8, id 35886)
- net/DNSKEY (alg 8, id 40649)
- net/DS (alg 8, id 35886)
- ownbay.net/DS (alg 7, id 50598)
- ownbay.net/DS (alg 8, id 56920)
Non_existent (2)
- ownbay.net/DNSKEY (alg 7, id 50598)
- ownbay.net/DNSKEY (alg 8, id 56920)
Delegation status
Bogus (1)
- net to ownbay.net
Secure (1)
- . to net
Notices
Errors (11)
- net to ownbay.net: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, TCP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN)
- net to ownbay.net: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no DS RR matched a DNSKEY with algorithm 7 that signs the zone's DNSKEY RRset. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, TCP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN)
- net to ownbay.net: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, TCP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN)
- ownbay.net/A: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, UDP_-_EDNS0_4096_D_KN)
- ownbay.net/DNSKEY (alg 7, id 53229): The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, TCP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN)
- ownbay.net/DNSKEY (alg 7, id 9608): The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, TCP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN)
- ownbay.net/MX: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
- ownbay.net/NS: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, UDP_-_EDNS0_4096_D_KN)
- ownbay.net/NSEC3PARAM: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, UDP_-_EDNS0_4096_D_KN)
- ownbay.net/SOA: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
- ownbay.net/TXT: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. (144.76.43.102, 204.42.254.5, 2001:418:3f4::5, UDP_-_EDNS0_4096_D_KN)
Warnings (18)
- RRSIG ownbay.net/A alg 7, id 9608: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG ownbay.net/DNSKEY alg 7, id 53229: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG ownbay.net/DNSKEY alg 7, id 53229: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG ownbay.net/DNSKEY alg 7, id 9608: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG ownbay.net/DNSKEY alg 7, id 9608: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG ownbay.net/MX alg 7, id 9608: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG ownbay.net/NS alg 7, id 9608: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG ownbay.net/NSEC3PARAM alg 7, id 9608: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG ownbay.net/SOA alg 7, id 9608: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG ownbay.net/TXT alg 7, id 9608: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- ownbay.net/DS (alg 7, id 50598): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- ownbay.net/DS (alg 7, id 50598): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- ownbay.net/DS (alg 7, id 50598): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
- ownbay.net/DS (alg 7, id 50598): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
- ownbay.net/DS (alg 8, id 56920): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- ownbay.net/DS (alg 8, id 56920): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- ownbay.net/DS (alg 8, id 56920): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
- ownbay.net/DS (alg 8, id 56920): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
JavaScript is required to make the graph below interactive.
