Dig 9.7 DNSSEC output

[Chris Thompson]

On May 9 2010, Peter Janssen wrote:

>Maybe this is related to the EDNS0 stuff?

Precisely so. dig does not display the OPT RR in the reply (or that
in the question if you use +qr, for that matter), but it's there
in the additional section as you can see from the count. You don't
have to use +dnssec to get this apparent-mismatch effect: +buf=...
or +edns=... are enough.

-- 
Chris Thompson
Email: cet1 at cam.ac.uk