> Thanks, drill seems like a nice replacement. Though, these days I find > myself using `resolvectl query` for most simple tests. > > I don't suppose you have a similar replacement for my other dependency > on the bind package, dnssec-signzone?
As a command I personally do not know of any replacement. But if you simply use `dnssec-signzone` to check the DNSSEC status of a domain you can pull online tools like https://dnssec-analyzer.verisignlabs.com/ (not that it is the best, but it is something).
