DNSSEC authentication and ad parameter

Anand Buddhdev anandb at ripe.net
Wed Jan 11 11:07:18 UTC 2012


On 11/01/2012 11:13, Gaurav kansal wrote:

Hi Gaurav,

> Now, I understand why I was not getting my “AD” flag set in query response.
> 
> I tried from google dns (8.8.8.8) also but didn’t get “AD” bit set. This may
> be because 8.8.8.8 might not be configured for DLV validation.
> 
> Is there any open dns available from which I can check my domain for “AD”
> flag set?????????????

DNS OARC runs a pair of validating servers, open to the public. Here's a
page with more information about then:

https://www.dns-oarc.net/oarc/services/odvr

Regards,

Anand Buddhdev
RIPE NCC



More information about the bind-users mailing list