DNSSEC

General questions.
Post Reply
yann_bonnamy
Posts: 1
Joined: August 13th, 2014, 10:55 am

DNSSEC

Post by yann_bonnamy » September 13th, 2018, 3:05 pm

Hi,

i'm behind a DNSSEC enabled ipfire and everything is OK.

let's say that i need to know the IP of dnssec-failed.org , today i just pick a "non validating" server in https://wiki.ipfire.org/dns/public-servers and i can query it with dig.

if tommorow every DNS are "validating", how could i determine the IP of dnssec-failed.org ?

Regards,

Yann.

User avatar
Arne.F
Core Developer
Core Developer
Posts: 7874
Joined: May 7th, 2006, 8:57 am
Location: BS <-> NDH
Contact:

Re: DNSSEC

Post by Arne.F » September 13th, 2018, 3:09 pm

This domain has a corrupt signature in the DNS database so it should not resolved.

So if all servers use DNSSec no one can resolve this domain.
Arne

Support the project on the IPFire whishlist!

Image

Image

Image
PS: I will not answer support questions via email and ignore IPFire related messages on my non IPFire.org mail addresses.

Post Reply

Who is online

Users browsing this forum: JonM and 8 guests