Replying to @silentlennie and @dakami

The equivalent of HTST in DNS is the DS at the parent. If its there you *expect* DNSKEYs and RRSIGs as a resolver

Thu May 31 11:23:42 +0000 2012


Replying to @dakami and @silentlennie

yeah, but dns is of course a slightly diff. proto than http\(s\)

Thu May 31 12:41:00 +0000 2012


RT @nlmarkscholten: Aanrader RT @SIDN U kunt het webinar ‘Do’s and don’ts van DNSSEC voor .nl-registrars’ terugkijken via http://t.co/Jv ...

Thu May 31 15:00:35 +0000 2012


Is there a quicker way #golang: element:=reflect.ValueOf\(val\.Field\(i\).Index\(j\)).Interface().\(EDNS0\)

Thu May 31 15:01:28 +0000 2012


Tesing nsid against an NLnet Labs’ server. Turns out they disabled it... Oh well, ::1 is always my friend

Thu May 31 16:35:15 +0000 2012


Replying to @arhbkb

thanks. The nl servers also have it enabled

Thu May 31 16:40:28 +0000 2012


#go #dns slightly reworked the EDNS0 stuff. Now ready for " Client subnet in DNS requests" http://tools.ietf.org/html/draft-vandergaast-edns-client-subnet-01

Thu May 31 17:36:18 +0000 2012


Replying to @stonehead

does it also do Android 4?

Thu May 31 19:30:04 +0000 2012


./q -client=130.89.89.130 @ns1.google.com http://www.google.com edns-client-subnet support in Go https://github.com/miekg/dns

Thu May 31 20:45:50 +0000 2012


Replying to @Wilmer

dit komt uit jouw dig patch :-) zo kon ik makkelijker de tcpdumps vergelijken :-)

Thu May 31 20:57:06 +0000 2012


Replying to @arhbkb

are there any NSD servers in that list? \(if you can/may share that info\)

Thu May 31 21:27:44 +0000 2012


Replying to @arhbkb

oh yes, of course. Thanks!

Thu May 31 21:31:12 +0000 2012


Okay... funny. My nsid code works against BIND, but not NSD...

Thu May 31 21:38:05 +0000 2012


Replying to @Habbie

q against l root with nsid does not work. With dig +nsid it works. Tcpdumping as soon as the commercials start on TV :-)

Thu May 31 21:42:46 +0000 2012


Replying to @arhbkb

thanks :-)

Thu May 31 21:43:19 +0000 2012


If the EDNS0 udp payload size is zero 0, NSD will not return the nsid even when requested. I think this is a bug in NSD...

Thu May 31 21:49:52 +0000 2012


a nsid: dig +nsid @l.root-servers.net soa .
no nsid: dig +nsid +bufsize=512 @l.root-servers.net soa .

Thu May 31 21:52:34 +0000 2012