On Thu, Jun 4, 2020 at 10:05 AM Matthew Pounsett <m...@dns-oarc.net> wrote:
> On the suggestion of some community members, I’m considering setting up a > list of known DNS test zones to be posted on OARC’s web site. The list > will include zones designed to provide data to use as input to DNS software. > > Off the top of my head, and with five minutes of googling, I know of only > two: > > test.dnssec-tools.org <https://dnssec-tools.org/testzone/> > workbench.sidnlabs.nl <https://workbench.sidnlabs.nl/> > > This seems to be one of those subjects that is hard to search; I’m mostly > getting test *software* in my search results. > > What other zones should be on such a list? Hi Matt, These don't appear to be listed on the rootcanary project's website ( rootcanary.org), but Willem Toorop recently made me aware that they have a set of DNSSEC test zones of the form "dNaNnN.rootcanary.net", where: dN: DS digest algorithm number aN: algorithm number nN: NSEC version (1 or 3) So, the zone "d2a15n3.rootcanary.net" has a DS record with hash algorithm 2 (SHA256), is signed with algorithm 15 (EdDSA25519), and uses NSEC3, etc. -- Shumon Huque
_______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations