dig -- only RRSIG present.

Michael Sinatra michael at rancid.berkeley.edu
Mon Feb 13 05:56:43 UTC 2012


On 02/12/12 18:48, Mark Andrews wrote:
>
> 8.8.8.8 returns servfail for me.
>
> Note a RFC 1035 caching server should be be able to resolve "dig ds org"
> though it may not return the response from the parent zone.  It depends
> on the cache state when the query is made.

Google seems to be okay at looking up DS records (when asked for them) 
for 2nd and 3rd level domains but not for TLDs.  Based on some 
experimentation with some obscure domains I own, it does seem to be 
properly querying the parent.  It just does the wrong thing for TLDs (at 
this point).

michael



More information about the bind-users mailing list