View on GitHub

DNSViz: A DNS visualization tool

sp.edu.sg

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
  8. |?|
  9. |?|
  10. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Insecure (2)
  • sp.edu.sg/NS
  • sp.edu.sg/TXT
Secure (1)
  • edu.sg/SOA

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Secure (9)
  • ./DNSKEY (alg 8, id 18733)
  • ./DNSKEY (alg 8, id 20326)
  • NSEC3 proving non-existence of sp.edu.sg/DS
  • edu.sg/DNSKEY (alg 8, id 10130)
  • edu.sg/DNSKEY (alg 8, id 21381)
  • edu.sg/DS (alg 8, id 10130)
  • sg/DNSKEY (alg 8, id 23403)
  • sg/DNSKEY (alg 8, id 46664)
  • sg/DS (alg 8, id 46664)

Delegation statusDelegation status

Insecure (1)
  • edu.sg to sp.edu.sg
Secure (2)
  • . to sg
  • sg to edu.sg

NoticesNotices

Errors (13)
  • NSEC3 proving non-existence of sp.edu.sg/DS: An iterations count of 0 must be used in NSEC3 records to alleviate computational burdens. See RFC 9276, Sec. 3.1.
  • NSEC3 proving non-existence of sp.edu.sg/DS: An iterations count of 0 must be used in NSEC3 records to alleviate computational burdens. See RFC 9276, Sec. 3.1.
  • sp.edu.sg zone: The server(s) were not responsive to queries over TCP. See RFC 1035, Sec. 4.2. (164.78.252.51)
  • sp.edu.sg zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (164.78.252.50, 2403:e900:ff1:e0fc::1:11, 2403:e900:ff1:e0fc::1:12)
  • sp.edu.sg/A: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (164.78.252.50, 164.78.252.51, 2403:e900:ff1:e0fc::1:11, 2403:e900:ff1:e0fc::1:12, UDP_-_NOEDNS_)
  • sp.edu.sg/AAAA: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (164.78.252.51, UDP_-_NOEDNS_)
  • sp.edu.sg/MX: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (164.78.252.51, UDP_-_NOEDNS_)
  • sp.edu.sg/MX: No response was received from the server over UDP (tried 4 times). See RFC 1035, Sec. 4.2. (164.78.252.51, UDP_-_EDNS0_512_D_KN)
  • sp.edu.sg/NS: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (164.78.252.50, 2403:e900:ff1:e0fc::1:11, 2403:e900:ff1:e0fc::1:12, UDP_-_NOEDNS_)
  • sp.edu.sg/NSEC3PARAM: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (164.78.252.51, UDP_-_NOEDNS_)
  • sp.edu.sg/SOA: No response was received from the server over TCP (tried 3 times). See RFC 1035, Sec. 4.2. (164.78.252.51, TCP_-_EDNS0_4096_D_N)
  • sp.edu.sg/SOA: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (164.78.252.51, UDP_-_NOEDNS_, UDP_-_NOEDNS__0x20)
  • sp.edu.sg/DS has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (4)
  • NSEC3 proving non-existence of sp.edu.sg/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
  • NSEC3 proving non-existence of sp.edu.sg/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
  • edu.sg to sp.edu.sg: AAAA glue records exist for sspwb110.sp.edu.sg, but there are no corresponding authoritative AAAA records. See RFC 1034, Sec. 4.2.2.
  • sp.edu.sg/DS has warnings; select the "Denial of existence" DNSSEC option to see them.

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph