DNSSEC/watch/qmail.jpについて、ここに記述してください。 DNSSECのInsecureを示す返答の例: NS, A ともに偽かもしれない。 $ dig +dnssec a www.qmail.jp @a.dns.jp {{{ ; <<>> DiG 9.7.3 <<>> +dnssec a www.qmail.jp @a.dns.jp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50878 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 4 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www.qmail.jp. IN A }}} {{{ ;; AUTHORITY SECTION: qmail.jp. 86400 IN NS a.ns.qmail.jp. qmail.jp. 86400 IN NS uz5b3p79vgf8v8yttum0fr1cbpg4tr0gdywhvwzdmb6u3hj6b8lk30.a.ns.qmail.jp. OO9GE367E3O0MAJ9IH4FI7UNLLJ6OG10.jp. 900 IN NSEC3 1 1 8 933F085BED OOQPP70DBB5R8N6P6B8VHOPSOP0RJ2MH NS SOA RRSIG DNSKEY NSEC3PARAM OO9GE367E3O0MAJ9IH4FI7UNLLJ6OG10.jp. 900 IN RRSIG NSEC3 8 2 900 20110725174503 20110625174503 3189 jp. k2Z9fheiiJA92nDSu6eufeOqYHaRyl95sbGNmkW9/aprmbVTS4DjP7xO LcMtGHnbshHuePVtHzHLae571gq8Ogf4p0ulYB7JAnuWxVqJJ5s8racd whqW7ymafgmMa2cszG+G7lh0v+2u45cH5gHSc+HykOQe9lfjM+ZpCDOG XW4= 8EI1OM1ACPGRFT7OONGJ2J7JB671B0I3.jp. 900 IN NSEC3 1 1 8 933F085BED 8MJNUCS8PP2AT2BH5LGPIMTBG1KUQ4AQ NS DS RRSIG 8EI1OM1ACPGRFT7OONGJ2J7JB671B0I3.jp. 900 IN RRSIG NSEC3 8 2 900 20110725174503 20110625174503 3189 jp. QsCfczNsNRTBZoyNUxZ66ZZuuPyIGDTmDmGJB8FKXNdurUSB05c3wulA sHctwN/Q1WWlzDPRmOSTtmVT1UBgP98/0Q8K6OCXa6Q59Js1VKQY7O3O ctWtfawmvatY9tObSB9Fp+tzvKbWCVBCO6BQ1D/4hwbxU0urqRoz2Jsn Ufc= }}} {{{ ;; ADDITIONAL SECTION: a.ns.qmail.jp. 86400 IN A 202.41.218.243 a.ns.qmail.jp. 86400 IN A 218.44.237.137 uz5b3p79vgf8v8yttum0fr1cbpg4tr0gdywhvwzdmb6u3hj6b8lk30.a.ns.qmail.jp. 86400 IN A 59.106.175.222 }}} {{{ ;; Query time: 40 msec ;; SERVER: 203.119.1.1#53(203.119.1.1) ;; WHEN: Thu Jun 30 08:03:14 2011 ;; MSG SIZE rcvd: 670 }}} ---- $ dig +dnssec ds www.qmail.jp @a.dns.jp {{{ ; <<>> DiG 9.7.3 <<>> +dnssec ds www.qmail.jp @a.dns.jp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49862 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 4 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www.qmail.jp. IN DS }}} {{{ ;; AUTHORITY SECTION: qmail.jp. 86400 IN NS a.ns.qmail.jp. qmail.jp. 86400 IN NS uz5b3p79vgf8v8yttum0fr1cbpg4tr0gdywhvwzdmb6u3hj6b8lk30.a.ns.qmail.jp. OO9GE367E3O0MAJ9IH4FI7UNLLJ6OG10.jp. 900 IN NSEC3 1 1 8 933F085BED OOQPP70DBB5R8N6P6B8VHOPSOP0RJ2MH NS SOA RRSIG DNSKEY NSEC3PARAM OO9GE367E3O0MAJ9IH4FI7UNLLJ6OG10.jp. 900 IN RRSIG NSEC3 8 2 900 20110725174503 20110625174503 3189 jp. k2Z9fheiiJA92nDSu6eufeOqYHaRyl95sbGNmkW9/aprmbVTS4DjP7xO LcMtGHnbshHuePVtHzHLae571gq8Ogf4p0ulYB7JAnuWxVqJJ5s8racd whqW7ymafgmMa2cszG+G7lh0v+2u45cH5gHSc+HykOQe9lfjM+ZpCDOG XW4= 8EI1OM1ACPGRFT7OONGJ2J7JB671B0I3.jp. 900 IN NSEC3 1 1 8 933F085BED 8MJNUCS8PP2AT2BH5LGPIMTBG1KUQ4AQ NS DS RRSIG 8EI1OM1ACPGRFT7OONGJ2J7JB671B0I3.jp. 900 IN RRSIG NSEC3 8 2 900 20110725174503 20110625174503 3189 jp. QsCfczNsNRTBZoyNUxZ66ZZuuPyIGDTmDmGJB8FKXNdurUSB05c3wulA sHctwN/Q1WWlzDPRmOSTtmVT1UBgP98/0Q8K6OCXa6Q59Js1VKQY7O3O ctWtfawmvatY9tObSB9Fp+tzvKbWCVBCO6BQ1D/4hwbxU0urqRoz2Jsn Ufc= ;; ADDITIONAL SECTION: a.ns.qmail.jp. 86400 IN A 218.44.237.137 a.ns.qmail.jp. 86400 IN A 202.41.218.243 uz5b3p79vgf8v8yttum0fr1cbpg4tr0gdywhvwzdmb6u3hj6b8lk30.a.ns.qmail.jp. 86400 IN A 59.106.175.222 ;; Query time: 46 msec ;; SERVER: 203.119.1.1#53(203.119.1.1) ;; WHEN: Thu Jun 30 14:41:07 2011 ;; MSG SIZE rcvd: 670 }}}