29.03.2016 Views

Hands-on DNSSEC with DNSViz

1LXLQe2

1LXLQe2

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Query for <strong>DNSSEC</strong> Records (2.1 – 2.5)<br />

$ dig +dnssec +multi @a.iana-servers.net example.com<br />

include <strong>DNSSEC</strong> records<br />

in resp<strong>on</strong>se (e.g., RRSIG)<br />

present resp<strong>on</strong>se in multiline<br />

format <strong>with</strong> comments<br />

(for readability)<br />

query for records of type<br />

“DNSKEY” (<strong>DNSSEC</strong> public key)<br />

instead of the default, “A” (address)<br />

$ dig +dnssec +multi @a.iana-servers.net example.com DNSKEY<br />

$ dig +dnssec +multi @a.gtld-servers.net example.com DS<br />

query a “parent” server because<br />

we’re seeking a DS record<br />

$ dig +dnssec +multi example.com<br />

$ dig +dnssec +multi @a.iana-servers.net foobar.example.com<br />

Verisign Public<br />

23

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!