Re: Dig 9.9.1 AD-bit

2012-08-04 Thread Tony Finch
On 3 Aug 2012, at 02:25, "Marco Davids (SIDN)" wrote: > Dig 9.9.1 is setting the AD-bit in queries by default. > Does anyone know why? It means "I want the results of DNSSEC validation but not all the RRSIG and NSEC records I would get from DO=1." Tony. -- f.anthony.n.finchhttp://dotat.at/

Re: Dig 9.9.1 AD-bit

2012-08-02 Thread Jeremy C. Reed
On Thu, 2 Aug 2012, Marco Davids (SIDN) wrote: > Dig 9.9.1 is setting the AD-bit in queries by default. > > Does anyone know why? 3205. [func] Upgrade dig's defaults to better reflect modern nameserver behaviour. Enable "dig +adflag" and

Dig 9.9.1 AD-bit

2012-08-02 Thread Marco Davids (SIDN)
Hi, Dig 9.9.1 is setting the AD-bit in queries by default. Does anyone know why? Took me a while to figure out, among other things because Wireshark has a little bug that prevents the AD-bit being shown in queries. (reported as bug 2472 and 7555 on https://bugs.wireshark.org/bugzilla/) Thanks.