Why don't many of your 1.1.1.1 instances validate DNSSEC signatures? I noticed at 29 Jan 2020 21:05:31 -0000.
ex. --- No AD Flag --- ~% drill -D www.ietf.org @1.1.1.1 ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 37059 ;; flags: qr rd ra ; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;; www.ietf.org. IN A ;; ANSWER SECTION: www.ietf.org. 1725 IN CNAME www.ietf.org.cdn.cloudflare.net. www.ietf.org. 1725 IN RRSIG CNAME 5 3 1800 20210127000323 20200127230611 40452 ietf.org. fX/FCVGya8pIk/2cMDWu3+iNKyWd0GLK4g6wtwp8v7rjp+nynpRm1jOanP20p36Dod4qj0IdoMGu3PN2756QZW7LzQ6nS+x7Re37Q52BP89ADXZ5J5tLlcaRl0MEyoj6/Cyv6cW+GH8sK0PwYmE11mVzezI3ZrADWvTCmgNxEpxHxoF0jlpJ0+JVt9gP2bbHWg0uF2yspTwspaoCSRcaO6KFKnkkQXI2PFhgk0w/Od4NXe86V64U1WtMGcqNyGOe0zcq4HPmiiW+lvZab6QuZJ8kq/A5HrDw66MzuRK5S2PJFjoF7lna9OIru9JXT+FcHmozUpI9lwLJIwI5IRt11g== www.ietf.org.cdn.cloudflare.net. 225 IN A 104.20.0.85 www.ietf.org.cdn.cloudflare.net. 225 IN RRSIG A 13 6 300 20200201051316 20200130031316 34505 cloudflare.net. 5ENTxqytYAMLW2cDtBiWLaEYDm9xMRplDZuoj/U084rAZoyjxwIrn3F+B2KfGldleYB5gbyvUPbPuv41lsoOUQ== www.ietf.org.cdn.cloudflare.net. 225 IN A 104.20.1.85 ;; AUTHORITY SECTION: ;; ADDITIONAL SECTION: ;; Query time: 196 msec ;; EDNS: version 0; flags: do ; udp: 1452 ;; SERVER: 1.1.1.1 ;; WHEN: Fri Jan 31 13:14:32 2020 ;; MSG SIZE rcvd: 536 --- With AD Flag --- ~% drill -D www.ietf.org @1.1.1.1 ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 23813 ;; flags: qr rd ra ad ; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;; www.ietf.org. IN A ;; ANSWER SECTION: www.ietf.org. 1578 IN CNAME www.ietf.org.cdn.cloudflare.net. www.ietf.org. 1578 IN RRSIG CNAME 5 3 1800 20210127000323 20200127230611 40452 ietf.org. fX/FCVGya8pIk/2cMDWu3+iNKyWd0GLK4g6wtwp8v7rjp+nynpRm1jOanP20p36Dod4qj0IdoMGu3PN2756QZW7LzQ6nS+x7Re37Q52BP89ADXZ5J5tLlcaRl0MEyoj6/Cyv6cW+GH8sK0PwYmE11mVzezI3ZrADWvTCmgNxEpxHxoF0jlpJ0+JVt9gP2bbHWg0uF2yspTwspaoCSRcaO6KFKnkkQXI2PFhgk0w/Od4NXe86V64U1WtMGcqNyGOe0zcq4HPmiiW+lvZab6QuZJ8kq/A5HrDw66MzuRK5S2PJFjoF7lna9OIru9JXT+FcHmozUpI9lwLJIwI5IRt11g== www.ietf.org.cdn.cloudflare.net. 300 IN A 104.20.0.85 www.ietf.org.cdn.cloudflare.net. 300 IN A 104.20.1.85 www.ietf.org.cdn.cloudflare.net. 300 IN RRSIG A 13 6 300 20200201051436 20200130031436 34505 cloudflare.net. cgg3sYERXPXlx4u1y5XKEFzaGHbJO/tiEqzpkC94JLyrlqAz4mG4ika+OeMaIIrnG80NDxuzA1XBXDyy9smldA== ;; AUTHORITY SECTION: ;; ADDITIONAL SECTION: ;; Query time: 39 msec ;; EDNS: version 0; flags: do ; udp: 1452 ;; SERVER: 1.1.1.1 ;; WHEN: Fri Jan 31 13:14:36 2020 ;; MSG SIZE rcvd: 555 -- ------------------------------------------------------------------------------ T.Suzuki _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
