none
DNSSEC RRS feed

  • Question

  • What should you run, if you need to verify whether a DNS response is signed by DNSSEC?
    Monday, July 13, 2015 12:00 PM

Answers

  • Hi Mityie,

    You can try: http://dnssec-debugger.verisignlabs.com/


    Regards,

    Matthijs

    Monday, July 13, 2015 1:16 PM
  • Hi MITYIE,

    Thanks for your post.

    If you want to check the validation of dns response. You could refer to the article.

    In the example, a DNS client computer queries a recursive (caching) DNS server, which in turn queries authoritative DNS servers before returning a response. This example assumes that DNS data is not yet cached on the client or server. If a zone is signed with DNSSEC, and if DNS servers and clients are DNSSEC-aware, then DNSSEC data can be used to validate that DNS responses are genuine.

    https://technet.microsoft.com/en-us/library/jj200221.aspx?f=255&MSPPError=-2147217396

    Best Regards,

    Mary Dong


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, July 14, 2015 5:58 AM
    Moderator

All replies

  • Hi Mityie,

    You can try: http://dnssec-debugger.verisignlabs.com/


    Regards,

    Matthijs

    Monday, July 13, 2015 1:16 PM
  • Hi MITYIE,

    Thanks for your post.

    If you want to check the validation of dns response. You could refer to the article.

    In the example, a DNS client computer queries a recursive (caching) DNS server, which in turn queries authoritative DNS servers before returning a response. This example assumes that DNS data is not yet cached on the client or server. If a zone is signed with DNSSEC, and if DNS servers and clients are DNSSEC-aware, then DNSSEC data can be used to validate that DNS responses are genuine.

    https://technet.microsoft.com/en-us/library/jj200221.aspx?f=255&MSPPError=-2147217396

    Best Regards,

    Mary Dong


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, July 14, 2015 5:58 AM
    Moderator