p3k.org
Updated:
2024-10-26 20:51:54 UTC (61 days ago)
Update now
Notices
DNSSEC Authentication Chain
RRset status
Insecure (7)
- p3k.org/A
- p3k.org/AAAA
- p3k.org/MX
- p3k.org/NS
- p3k.org/NSEC3PARAM
- p3k.org/SOA
- p3k.org/TXT
Secure (1)
- org/SOA
DNSKEY/DS/NSEC status
Insecure (2)
- p3k.org/DNSKEY (alg 7, id 46131)
- p3k.org/DNSKEY (alg 7, id 47753)
Secure (7)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 61050)
- NSEC3 proving non-existence of p3k.org/DS
- org/DNSKEY (alg 8, id 15678)
- org/DNSKEY (alg 8, id 26974)
- org/DNSKEY (alg 8, id 42393)
- org/DS (alg 8, id 26974)
Delegation status
Insecure (1)
- org to p3k.org
Secure (1)
- . to org
Notices
Errors (4)
- p3k.org/CDS has errors; select the "Denial of existence" DNSSEC option to see them.
- rgm7j.8hrei.p3k.org/A has errors; select the "Denial of existence" DNSSEC option to see them.
- p3k.org/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
- p3k.org/CDNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (19)
- NSEC3 proving non-existence of p3k.org/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
- NSEC3 proving non-existence of p3k.org/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
- RRSIG p3k.org/A alg 7, id 47753: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG p3k.org/AAAA alg 7, id 47753: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG p3k.org/DNSKEY alg 7, id 46131: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG p3k.org/DNSKEY alg 7, id 46131: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG p3k.org/DNSKEY alg 7, id 47753: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG p3k.org/DNSKEY alg 7, id 47753: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG p3k.org/MX alg 7, id 47753: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG p3k.org/NS alg 7, id 47753: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG p3k.org/NSEC3PARAM alg 7, id 47753: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG p3k.org/SOA alg 7, id 47753: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG p3k.org/TXT alg 7, id 47753: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- p3k.org/CDS has warnings; select the "Denial of existence" DNSSEC option to see them.
- p3k.org/DS has warnings; select the "Denial of existence" DNSSEC option to see them.
- p3k.org/CDNSKEY has warnings; select the "Denial of existence" DNSSEC option to see them.
- p3k.org/DNSKEY has warnings; select the "Denial of existence" DNSSEC option to see them.
- p3k.org/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
- rgm7j.8hrei.p3k.org/A has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
