Package: wiki.debian.org
Severity: important
Hi,
Most of the DNSSEC Wiki page "Test DNSSEC" section doesn't work anymore.
* The first Command line test "dig org. SOA +dnssec" still works though it
would be nice to add +multiline to the and of the command for better
readability of the output.
* The second command "dig +short test.dnssec-or-not.net TXT | tail -1" does not
work anymore. When you visit the URL you get this message: The "dnssec-or-not"
web site is going through a redesign. Previously the test was implemented
entirely using the DNS protocol. Unfortunately, a DNS server cannot be
absolutely sure that a DNS client is fully protected by DNSSEC. This led to
false positives. The test is being redesigned to increase its accuracy.
* The third command "dig +noall +comments dnssec-failed.org" seems okay.
In the "Web-based" section:
* The first URL shows an error ("The separate test for DNSSEC-validation
available here has now been integrated in this test: https://internet.nl";) so
it is better changed to that URL.
* The second URL also shows and error ("The dnssec-or-not web site is going
through a redesign. Previously the test was implemented entirely using the DNS
protocol. Unfortunately, a DNS server cannot be absolutely sure that a DNS
client is fully protected by DNSSEC. This led to false positives. The test is
being redesigned to increase its accuracy.") so it is better to remove it.
Greetings,
Ralf Vroomen.
