<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 02/12/12 23:13, Miek Gieben wrote:
<blockquote cite="mid:20120212174308.GA29405@miek.nl" type="cite">
<pre wrap="">[ Quoting <a class="moz-txt-link-rfc2396E" href="mailto:de.techno@gmail.com"><de.techno@gmail.com></a> at 23:10 on Feb 12 in "dig -- only RRSIG pr..." ]
</pre>
<blockquote type="cite">
<pre wrap="">I'm trying to see DNSSEC response of various sites; my DNS server is
8.8.8.8 (google's public DNS service)
</pre>
</blockquote>
<pre wrap="">
Google's public resolvers don't handle DNSSEC very well...
grtz Miek
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Please visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></pre>
</blockquote>
They claim that they do support - <br>
<br>
<a class="moz-txt-link-freetext" href="http://code.google.com/speed/public-dns/faq.html#dnssec">http://code.google.com/speed/public-dns/faq.html#dnssec</a><br>
<br>
But, that's not apparent - <br>
<br>
dig +dnssec -t A yahoo.com @198.41.0.4 <br>
<br>
; <<>> DiG 9.8.1 <<>> +dnssec -t A yahoo.com
@198.41.0.4<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:
47278<br>
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 15, ADDITIONAL: 16<br>
;; WARNING: recursion requested but not available<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags: do; udp: 512<br>
;; QUESTION SECTION:<br>
;yahoo.com. IN A<br>
<br>
;; AUTHORITY SECTION:<br>
com. 172800 IN NS a.gtld-servers.net.<br>
com. 172800 IN NS b.gtld-servers.net.<br>
com. 172800 IN NS c.gtld-servers.net.<br>
com. 172800 IN NS d.gtld-servers.net.<br>
com. 172800 IN NS e.gtld-servers.net.<br>
com. 172800 IN NS f.gtld-servers.net.<br>
com. 172800 IN NS g.gtld-servers.net.<br>
com. 172800 IN NS h.gtld-servers.net.<br>
com. 172800 IN NS i.gtld-servers.net.<br>
com. 172800 IN NS j.gtld-servers.net.<br>
com. 172800 IN NS k.gtld-servers.net.<br>
com. 172800 IN NS l.gtld-servers.net.<br>
com. 172800 IN NS m.gtld-servers.net.<br>
com. 86400 IN DS 30909 8 2
E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CF C41A5766<br>
com. 86400 IN RRSIG DS 8 1 86400
20120219000000 20120211230000 51201 .
lgz7WlGBmaimFXYL+W3TDqi0fFDZGyH2p2OunrTmx93yDdPatscOEm2c
19dxFFiZloABGT9fLrE+FYKmTtGUP/UFWdqfgX3MpTCJrJL2DeJ6m3q+
qMj+OOm+0RWi14jxnvLn8yLqwr5uwzvqpUBGBWJUBM/Qm07Bjg1Jr+pR Ibw=<br>
<br>
;; ADDITIONAL SECTION:<br>
a.gtld-servers.net. 86400 IN AAAA 2001:503:a83e::2:30<br>
a.gtld-servers.net. 86400 IN A 192.5.6.30<br>
b.gtld-servers.net. 86400 IN AAAA 2001:503:231d::2:30<br>
b.gtld-servers.net. 86400 IN A 192.33.14.30<br>
c.gtld-servers.net. 86400 IN A 192.26.92.30<br>
d.gtld-servers.net. 86400 IN A 192.31.80.30<br>
e.gtld-servers.net. 86400 IN A 192.12.94.30<br>
f.gtld-servers.net. 86400 IN A 192.35.51.30<br>
g.gtld-servers.net. 86400 IN A 192.42.93.30<br>
h.gtld-servers.net. 86400 IN A 192.54.112.30<br>
i.gtld-servers.net. 86400 IN A 192.43.172.30<br>
j.gtld-servers.net. 86400 IN A 192.48.79.30<br>
k.gtld-servers.net. 86400 IN A 192.52.178.30<br>
l.gtld-servers.net. 86400 IN A 192.41.162.30<br>
m.gtld-servers.net. 86400 IN A 192.55.83.30<br>
<br>
;; Query time: 202 msec<br>
;; SERVER: 198.41.0.4#53(198.41.0.4)<br>
;; WHEN: Mon Feb 13 09:52:35 2012<br>
;; MSG SIZE rcvd: 733<br>
<br>
<hr size="2" width="100%"><br>
<br>
dig +dnssec -t A yahoo.com @8.8.8.8<br>
<br>
; <<>> DiG 9.8.1 <<>> +dnssec -t A yahoo.com
@8.8.8.8<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:
33152<br>
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags: do; udp: 512<br>
;; QUESTION SECTION:<br>
;yahoo.com. IN A<br>
<br>
;; ANSWER SECTION:<br>
yahoo.com. 1683 IN A 98.137.149.56<br>
yahoo.com. 1683 IN A 98.139.183.24<br>
yahoo.com. 1683 IN A 209.191.122.70<br>
yahoo.com. 1683 IN A 72.30.2.43<br>
<br>
;; Query time: 53 msec<br>
;; SERVER: 8.8.8.8#53(8.8.8.8)<br>
;; WHEN: Mon Feb 13 09:53:26 2012<br>
;; MSG SIZE rcvd: 102<br>
</body>
</html>