gov to socialsecurity.gov: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no DS RR matched a DNSKEY with algorithm 7 that signs the zone's DNSKEY RRset. (137.200.4.30, 137.200.4.31, 137.200.43.8, 137.200.43.9, 2001:1930:d07:1::8, 2001:1930:d07:1::9, 2001:1930:e03::c, 2001:1930:e03::d, UDP_-_EDNS0_4096_D_KN)
Warnings (16)
RRSIG socialsecurity.gov/A alg 7, id 14414: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG socialsecurity.gov/AAAA alg 7, id 14414: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG socialsecurity.gov/DNSKEY alg 7, id 14414: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG socialsecurity.gov/DNSKEY alg 7, id 14414: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG socialsecurity.gov/DNSKEY alg 7, id 14414: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG socialsecurity.gov/NS alg 7, id 14414: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG socialsecurity.gov/SOA alg 7, id 14414: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG socialsecurity.gov/TXT alg 7, id 14414: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
socialsecurity.gov/DS (alg 13, id 10481): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
socialsecurity.gov/DS (alg 13, id 10481): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
socialsecurity.gov/DS (alg 13, id 10481): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
socialsecurity.gov/DS (alg 13, id 10481): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
socialsecurity.gov/DS (alg 7, id 11355): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
socialsecurity.gov/DS (alg 7, id 11355): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
socialsecurity.gov/DS (alg 7, id 11355): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
socialsecurity.gov/DS (alg 7, id 11355): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.