Hacker News new | past | comments | ask | show | jobs | submit login

Yes. I like what they are trying to do, but they don't seem to actually think things through. It took me forever to get some of the server tests fixed, where it would report that my server didn't properly support IPv6 (in DNS) when in fact it did and just their test was wrong.

For me it says now 'your DNS service providers are:' and then the name of the netblock owner. The actual name server is in my network.




Currently the page is also showing a false negative in this case. My local DNS recursor validates DNSSEC:

  ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1
But the test result says:

  Not protected from redirection to false IP addresses (DNSSEC)


What does the 'detailed report' say at the DNSSEC-part?




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: