At the moment i experimenting with the restart performance of BIND9 (version 9.16.17). With 26000 active zones in the named.conf, the restart is round ...

I have a file called named.conf, which is the configuration file for BIND. It has entries enclosed in curly braces. I want to edit and enter a new zon ...

I'm fiddling with DNSSEC, and I'd like to try to verify NSEC3 records generated by dnssec-signzone from bind9-utils (which I presume are valid). This ...

I was just introduced to the Domain Name System Security Extensions (DNSSEC) and it sounds very similar to the concept of DNS-over-HTTPS (DoH) and DNS ...

I bought a domain name magicescape.es a year ago. The issue is that this domain name has a DS record, but I didn't add it and can't delete or change. ...

Is there any support for DNSSEC for apps hosted on Firebase? According to these 2 reports not: https://viewdns.info/dnssec/?domain=firebaseapp.com ...

I have been trying for a long time to get a DNSSEC validated on Google, but every time when I tried to get it, I got some errors. For example, when I ...

I am writing DNS server on python and currently stuck with DNSKEY resource record for DNSSEC. According to RFC5702 RSA/SHA256 key components are: U ...

I've configured a new zone (IDN domain) at my authoritative DNS server, but it dosesn't work, when I try to troubleshiit using DIG command i receive " ...

here is my scenario: i have build an LB on GCP (https). Static reserved IP DNSSEC set to on DNS A and CNAME records 4 web servers sit behind the LB ba ...

Model: I have my domain registered in provider subreg.cz and he have ability of DNSSEC. I am pointing domain to AWS Route 53 with AWS nameservers. Tr ...

I'm wondering how trustworthy the data from a SRV record lookup is? I have a program that essentially could fall apart if someone were to be able to s ...

Please help me to clarify my doubts, I have a doubt regarding DNSSEC Key Roll Over. If any specific reason to resign every domain within a time peri ...

dsfromkey command to generate ds record with following digest types DSA/SHA1, RSA/SHA-1,DSA-NSEC3-SHA1, RSA/SHA-512, GOST R 34.10-2001 etc I am using ...

I have a DNS server for (com) zone. I use BIND 9.10.3 in Ubuntu. I want to use DNSSEC for DNS queries to this server. I have created ZSK and KSK and I ...

Long time listener, first time caller here. I'm writing a DNS resolver with DNSSEC validation incorporated, and have noticed something that i can't r ...

I am in the process of finishing a Domain Registrar plugin for a billing system (which also manages domain provisioning in this case), and the last bi ...

I would like to list all/any DNS records including the DANE TLSA. With I get all records including DNSSEC etc. but nothing about DANE. Why? With ...

I'm trying to do a RRSIG validation, I'm trying to use the openssl lib in PHP. But I'm having a problem to pass the public key to the openssl_verify f ...

I am trying to create private and public keys for DNSSEC algorithm 13: Testing: (Perl line just converts hex notation to binary and then to base ...