Re: Dig 9.9.1 AD-bit

2012-08-04 Thread Tony Finch
On 3 Aug 2012, at 02:25, Marco Davids (SIDN) marco.dav...@sidn.nl wrote: Dig 9.9.1 is setting the AD-bit in queries by default. Does anyone know why? It means I want the results of DNSSEC validation but not all the RRSIG and NSEC records I would get from DO=1. Tony. -- f.anthony.n.finch

Dig 9.9.1 AD-bit

2012-08-02 Thread Marco Davids (SIDN)
Hi, Dig 9.9.1 is setting the AD-bit in queries by default. Does anyone know why? Took me a while to figure out, among other things because Wireshark has a little bug that prevents the AD-bit being shown in queries. (reported as bug 2472 and 7555 on https://bugs.wireshark.org/bugzilla/)

Re: Dig 9.9.1 AD-bit

2012-08-02 Thread Jeremy C. Reed
On Thu, 2 Aug 2012, Marco Davids (SIDN) wrote: Dig 9.9.1 is setting the AD-bit in queries by default. Does anyone know why? 3205. [func] Upgrade dig's defaults to better reflect modern nameserver behaviour. Enable dig +adflag and