DLV and the ad flag

Thomas Schulz schulz at adi.com
Wed Nov 27 18:30:37 UTC 2013


Acording to the book Dnssec Mastery, I should be able to test if my
Bind is correctly set up to use the DLV with the command:

dig +dnssec nsec3.dlvtest.dns-orac.net

And I should expect expect to see the RRSIG records and see the AD
flag set. I do get the RRSIG records but I do not see the AD flag.
Do I have a problem or is the book wrong? I do see the AD flag if
I dig www.isc.org. I am running Bind 9.9.4.

Tom Schulz
Applied Dynamics Intl.
schulz at adi.com


More information about the bind-users mailing list