## page was renamed from DNSSEC/query-2 ## page was renamed from DNS/DNSSEC/query-2 Describe DNS/DNSSEC/query-2 here. DNSSEC問い合わせの例: == $ dig +dnssec qmail.jp ns @a.dns.jp == NSEC3とそのRRSIGつきの返事が返ってくる。 (権威がない)NSレコードの内容は保証されない。  つまり、DJBの言う通り、毒盛できる。(これはDNSSECは守備範囲外だと主張する。)   しかし、JPドメインサーバがDNSCurve対応していれば、NSレコードの毒盛は困難になるはず。 $ dig +dnssec qmail.jp ns @a.dns.jp {{{ ; <<>> DiG 9.7.1-P2 <<>> +dnssec qmail.jp ns @a.dns.jp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46445 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 7, ADDITIONAL: 5 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;qmail.jp. IN NS ;; AUTHORITY SECTION: qmail.jp. 86400 IN NS a.ns.qmail.jp. qmail.jp. 86400 IN NS uz5b3p79vgf8v8yttum0fr1cbpg4tr0gdywhvwzdmb6u3hj6b8lk30.a.ns.qmail.jp. qmail.jp. 86400 IN NS uz5cw01vfzmtp0kvuhs6ud6195nnyll1ulhhmu4tp2hxc1ddx1vr45.qmail.jp. LABFGO2MQ54FV2B22ITAKHF222MJAI92.jp. 900 IN NSEC3 1 1 8 0F7B37EDEB LC9NOKO0A7Q9H427SG687QL3MQQUCGBI NS SOA RRSIG DNSKEY NSEC3PARAM LABFGO2MQ54FV2B22ITAKHF222MJAI92.jp. 900 IN RRSIG NSEC3 8 2 900 20110328174503 20110226174503 33696 jp. xbfODYVuVlipDHPPIrEzKdaN4typEF7fHomebplCJ4hDAl6h3D+E37G8 rm4smA9UcrJhQGEFkL3JETa6yzocmDG7tYLlEFM1si4qANGglSZNWDKg XZNXQ2gThd04thgLL1X4EhU8LgDOaNv3D2Z8fqzmut6NdjpGicqyASrC zlc= OVHIM15IU9BTPCJT73IODTT868IIOLCL.jp. 900 IN NSEC3 1 1 8 0F7B37EDEB P6BD5H0SDMSRUD01ND1NAIHKNF0U7OAN NS DS RRSIG OVHIM15IU9BTPCJT73IODTT868IIOLCL.jp. 900 IN RRSIG NSEC3 8 2 900 20110328174503 20110226174503 33696 jp. wm2Ecs5FDI5+Wq5wBES2wUTojWu5VtfBjcEgoSKX4//ccxjHNGgL7t/V gzUS+OQ4Z2B8oDrumpX+09atr1OEYI2HF/aXPVCv+YJebf1JSMtVM5tT zXJKcfnXEEApzWIIld+ROm9FooKf2d9HrAgnhacAW/3RY0fkcXVteFTX xFs= ;; ADDITIONAL SECTION: a.ns.qmail.jp. 86400 IN A 202.41.218.243 a.ns.qmail.jp. 86400 IN A 218.44.237.137 uz5b3p79vgf8v8yttum0fr1cbpg4tr0gdywhvwzdmb6u3hj6b8lk30.a.ns.qmail.jp. 86400 IN A 59.106.175.222 uz5cw01vfzmtp0kvuhs6ud6195nnyll1ulhhmu4tp2hxc1ddx1vr45.qmail.jp. 86400 IN A 202.41.218.243 ;; Query time: 35 msec ;; SERVER: 203.119.1.1#53(203.119.1.1) ;; WHEN: Sun Feb 27 12:12:21 2011 ;; MSG SIZE rcvd: 751 }}}