Thank you Otto for your quick answer. Le jeudi 18 juillet 2019 à 08:54:02 UTC+2, Otto Moerbeek <o...@drijf.net> a écrit : On Thu, Jul 18, 2019 at 06:41:12AM +0000, Mik J wrote:
> Hello, > I'm using Openbsd 6.5 and have DiG 9.4.2-P2 provided with it.This version > seems to be old (from 2009) but I couldn't find exactly when it dates. > However new DNS records appeared in 2013 such as CAA in RFC 6844When I dig > the CAA record dig returns NXDOMAIN > insteadhttps://dns.google.com/query?name=google.com&type=CAA&dnssec=true > Do you think we could have an updated version of dig in Openbsd base ? > Thank you > > $ dig CAA google.com Yes, known. It is on my list to update it, but I don't know when I will get to it. If you really need a newer one, you can install isc-bind from packages, it comes with a newer dig in /usr/local/bin -Otto > > ; <<>> DiG 9.4.2-P2 <<>> CAA google.com > ;; global options: printcmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 680 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;CAA. IN A > ;; AUTHORITY SECTION: > 9534 IN SOA a.root-servers.net. > nstld.verisign-grs.com. 2019071800 1800 900 604800 86400 > > ;; Query time: 23 msec > ;; WHEN: Thu Jul 18 08:13:43 2019 > ;; MSG SIZE rcvd: 96 > > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2230 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 8 > > ;; QUESTION SECTION: > ;google.com. IN A > ;; ANSWER SECTION: > google.com. 300 IN A 172.217.18.206 > > > >