dig @8.8.8.8 +dnssec ds-2.alg-8-nsec.dnssec-test.org. dnskey +dnssec
this answer will have the AD bit set
dig @8.8.8.8 +dnssec ds-2.alg-13-nsec.dnssec-test.org. dnskey +dnssec
works but w/o AD bit on answer
Do you have a timeline to support the ECC algorithms?
Thanks
Olafur
--
--
========================================================
You received this message because you are subscribed to the Google
Groups "public-dns-discuss" group.
To post to this group, send email to public-dn...@googlegroups.com
To unsubscribe from this group, send email to
public-dns-disc...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/public-dns-discuss?hl=en
For more information on Google Public DNS, please visit
http://code.google.com/speed/public-dns
========================================================
---
You received this message because you are subscribed to the Google Groups "public-dns-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to public-dns-disc...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
At the moment, there is no ETA for ECDSA support from Google Public DNS resolvers.Yunhong
On Thu, Oct 2, 2014 at 8:54 PM, <ola...@cloudflare.com> wrote:
--Hi,I was testing various DNSSEC enabled resolvers for algorithm support and noticed that Google DNS does not validate answers signed by the modern ECC algorithmsYou can test this by doing following queriesdig @8.8.8.8 +dnssec ds-2.alg-8-nsec.dnssec-test.org. dnskey +dnssec
this answer will have the AD bit set
dig @8.8.8.8 +dnssec ds-2.alg-13-nsec.dnssec-test.org. dnskey +dnssec
works but w/o AD bit on answer
Do you have a timeline to support the ECC algorithms?
Thanks
Olafur
--
========================================================
You received this message because you are subscribed to the Google
Groups "public-dns-discuss" group.
To post to this group, send email to public-dn...@googlegroups.com
To unsubscribe from this group, send email to
For more options, visit this group at
http://groups.google.com/group/public-dns-discuss?hl=en
For more information on Google Public DNS, please visit
http://code.google.com/speed/public-dns
========================================================
---
You received this message because you are subscribed to the Google Groups "public-dns-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to public-dns-discuss+unsub...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/public-dns-discuss?hl=en
For more information on Google Public DNS, please visit
http://code.google.com/speed/public-dns
========================================================
---
You received this message because you are subscribed to the Google Groups "public-dns-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to public-dns-disc...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/public-dns-discuss?hl=en
For more information on Google Public DNS, please visit
http://code.google.com/speed/public-dns
========================================================
---
You received this message because you are subscribed to the Google Groups "public-dns-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to public-dns-discuss+unsubscribe@googlegroups.com.