tor-relay.zwiebeltoralf.de | DNSViz

tor-relay.zwiebeltoralf.de

Updated: 2021-01-09 20:23:21 UTC (1209 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Insecure (2)

tor-relay.zwiebeltoralf.de/A
tor-relay.zwiebeltoralf.de/AAAA

Secure (1)

de/SOA

DNSKEY/DS/NSEC status

Secure (7)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 26116)
./DNSKEY (alg 8, id 42351)
NSEC3 proving non-existence of zwiebeltoralf.de/DS
de/DNSKEY (alg 8, id 45580)
de/DNSKEY (alg 8, id 5730)
de/DS (alg 8, id 45580)

Delegation status

Insecure (1)

de to zwiebeltoralf.de

Secure (1)

. to de

Notices

Errors (2)

zwiebeltoralf.de zone: The server(s) responded over TCP with a malformed response or with an invalid RCODE. (193.47.99.4)
zwiebeltoralf.de/DNSKEY: No response was received from the server over UDP (tried 4 times). (2001:67c:192c::add:b3, UDP_-_EDNS0_512_D_KN)

Warnings (1)

tor-relay.zwiebeltoralf.de/A: No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. (193.47.99.4, UDP_-_EDNS0_4096_D_KN)

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

See also

DNSSEC Debugger by Verisign Labs.

Download: png | svg

Warning

JavaScript is required to make the graph below interactive.

DNSSEC authentication graph