Re: DLV and the ad flag

2013-11-27 Thread Thomas Schulz
> On Wed, Nov 27, 2013 at 01:30:37PM -0500, Thomas Schulz wrote: > > Acording to the book Dnssec Mastery, I should be able to test if my > > Bind is correctly set up to use the DLV with the command: > > > > dig +dnssec nsec3.dlvtest.dns-orac.net > > "dns-oarc", not "dns-orac". (OARC: Operations,

Re: DLV and the ad flag

2013-11-27 Thread Evan Hunt
On Wed, Nov 27, 2013 at 01:30:37PM -0500, Thomas Schulz wrote: > Acording to the book Dnssec Mastery, I should be able to test if my > Bind is correctly set up to use the DLV with the command: > > dig +dnssec nsec3.dlvtest.dns-orac.net "dns-oarc", not "dns-orac". (OARC: Operations, Analysis and

DLV and the ad flag

2013-11-27 Thread Thomas Schulz
Acording to the book Dnssec Mastery, I should be able to test if my Bind is correctly set up to use the DLV with the command: dig +dnssec nsec3.dlvtest.dns-orac.net And I should expect expect to see the RRSIG records and see the AD flag set. I do get the RRSIG records but I do not see the AD flag