secure.d1a3n1.rootcanary.net
« Previous analysis
|
Next analysis »
RRset status
Insecure (2)
-
secure.d1a3n1.rootcanary.net/A
-
secure.d1a3n1.rootcanary.net/AAAA
DNSKEY/DS/NSEC status
Insecure (1)
-
d1a3n1.rootcanary.net/DNSKEY (alg 3, id 26281)
Secure (9)
-
./DNSKEY (alg 8, id 20326)
-
./DNSKEY (alg 8, id 60955)
-
d1a3n1.rootcanary.net/DS (alg 3, id 26281)
-
net/DNSKEY (alg 8, id 27554)
-
net/DNSKEY (alg 8, id 35886)
-
net/DS (alg 8, id 35886)
-
rootcanary.net/DNSKEY (alg 8, id 25188)
-
rootcanary.net/DNSKEY (alg 8, id 64786)
-
rootcanary.net/DS (alg 8, id 64786)
Delegation status
Insecure (1)
-
rootcanary.net to d1a3n1.rootcanary.net
Secure (2)
-
. to net
-
net to rootcanary.net
Notices
Warnings (8)
-
RRSIG d1a3n1.rootcanary.net/DNSKEY alg 3, id 26281: DNSSEC specification prohibits signing with DNSSEC algorithm 3 (DSA).
-
RRSIG d1a3n1.rootcanary.net/DNSKEY alg 3, id 26281: DNSSEC specification prohibits validation of RRSIGs with DNSSEC algorithm 3 (DSA).
-
RRSIG secure.d1a3n1.rootcanary.net/A alg 3, id 26281: DNSSEC specification prohibits signing with DNSSEC algorithm 3 (DSA).
-
RRSIG secure.d1a3n1.rootcanary.net/A alg 3, id 26281: DNSSEC specification prohibits validation of RRSIGs with DNSSEC algorithm 3 (DSA).
-
RRSIG secure.d1a3n1.rootcanary.net/AAAA alg 3, id 26281: DNSSEC specification prohibits signing with DNSSEC algorithm 3 (DSA).
-
RRSIG secure.d1a3n1.rootcanary.net/AAAA alg 3, id 26281: DNSSEC specification prohibits validation of RRSIGs with DNSSEC algorithm 3 (DSA).
-
d1a3n1.rootcanary.net/DS (alg 3, id 26281): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
-
d1a3n1.rootcanary.net/DS (alg 3, id 26281): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
DNSKEY legend
Full legend
| SEP bit set |
| Revoke bit set |
| Trust anchor |
JavaScript is required to make the graph below interactive.