Now validatable: surfnet.nl

Written by Roland van Rijswijk in category: General

Just to let you all know: surfnet.nl is now fully validatable for the first time! A secure delegation has been added to the .nl zone which in turn now has a secure delegation in the root zone!

Look at the dig statement below: the answer now has the ‘AD’ bit set to indicate that the query was validated by the resolver.

$ dig +dnssec dnssec.surfnet.nl

; <> DiG 9.6.0-APPLE-P2 <> +dnssec dnssec.surfnet.nl
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12852
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 6, ADDITIONAL: 13

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;dnssec.surfnet.nl. IN A

;; ANSWER SECTION:
dnssec.surfnet.nl. 4508 IN A 145.100.186.33
dnssec.surfnet.nl. 4508 IN RRSIG A 8 3 7200 20101122023642 20101114190006 16395 surfnet.nl. tHmqsbhNe+fB7TWN4eYXfBbPwjbcjDkB8l43O4SigSpMrrAA+FeVS+cp SApRcB/CUwTGNbyL7/HM/C50aKuy89vSepFb1fUceoewMfgZZMtZoetO 6id64U6I0cu/ABfhFf952xlgE22lIZXwukcYHjWgUOMHSRHW+mkYZ0GP jm8=
......

Respond

*