> No, I need to actually locally sign zonefiles for my own DNSSEC. Then
> even `resolvectl query` (part of base!) can check their DNSSEC status.
No, I don't know anything. It is not an operation that I do either, so I cannot
contribute much in this case :-(
> Thanks, drill seems like a nice replacement. Though, these days I find
> myself using `resolvectl query` for most simple tests.
>
> I don't suppose you have a similar replacement for my other dependency
> on the bind package, dnssec-signzone?
As a command I personally do not know of any repla
> your mails are single-handedly flooding my list mbox - please be mindful
> of others when interacting with mailing lists, perhaps collate your
> emails into fewer.
Man, you could criticize Polarian for some things, but complaining that you get
a lot of mail on a mailing list is the most absur
> I install bind for the use of dig.
You can use `drill`[1] instead of `dig` and avoid installing anything (as long
as you have OpenSSH installed, which, dare I say it, is a must). It may seem a
little strange at first, but it's essentially the same thing.
[1]: https://linux.die.net/man/1/drill
