[dns-wg] DNSSEC: Signed zones list

Hi,

> It's like black magic :(
> 
> localhost bind # ping dlv.verisignlab.com
> ping: unknown host dlv.verisignlab.com

I can't find any DNS records for that zone either.

> localhost bind # ping dnssec.iks-jena.de
> ping: unknown host dnssec.iks-jena.de

But: you are looking only for A and/or AAAA records here. Those are not
relevant for what you want to do with DNSSEC. Try "dig dnssec.iks-jena.de
any"

You will get something like:

; <<>> DiG 9.2.4 <<>> dnssec.iks-jena.de any
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10861
;; flags: qr rd ra; QUERY: 1, ANSWER: 10, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;dnssec.iks-jena.de.            IN      ANY

;; ANSWER SECTION:
dnssec.iks-jena.de.     57512   IN      TYPE48  \# 134
0100030501039E1F9DA1882F5054559A92916DACF8483B4F1A8B53D0
 	6C55FFD75C2DE4A008FB2C08D0B19BC89FA279DB7FFEA8ABF44C21AA 
	295DFCE9D8CD7829B544C216CF6530E2D43AE0EF5E9D80B2CB87669F 
	3455DC9C14952788CDF9AA6BD38805E99B0B8729E9F5E47D38E5874A 
	644499E68AAB0113EB59B1C10C5AD4693A25BC554841
dnssec.iks-jena.de.     57512   IN      TYPE48  \# 262
010103050103B8161FFE486EC0A2F6DE05AA20FF6F6FE29C96E58889 
	34BEC1AB2840BEA12A8655222EB1A2A72E54B3EC1B5C9D1CE0637CBE 
	549CCB4015078CFEE2F0BFCFFB396652783CF737F07D5B5E21CF0691 
	717CE6A85421DA4B044924E7843DC3BC75F6AFA1E39CBDB5A95B3B9A 
	62ADC5D5DC514F9226FA2D58E62586C1D3D54F523106F0DEF2CB9EEB 
	14730DC5E28483CCBEE3A4AD07AA3B88F692F1FF1A48D0AB8DB14ACC 
	65FF427D8B6BC5AA559E43DEA3AD77259EB176C283B649ACA5EC677F 
	0646F4792BDD35B042589A5E30F05FEA2FD0D39A45E20A7589B226B6 
	F723447EE10CADE2A80CC94D86EBAD0F99D98206E42ED4F6C5937EBB 
	572C4635F40449982131
dnssec.iks-jena.de.     3512    IN      TYPE47  \# 63
01320132013001320134013601330133013601360139013404653136 
	34046172706106646E7373656308696B732D6A656E61026465000007 
	22000000000380
dnssec.iks-jena.de.     3512    IN      TYPE46  \# 294
003005030000E10045E84FA843D8F7A8A22D06646E7373656308696B 
	732D6A656E6102646500835A26CD1BD23C709CC56529F92E2F54193F 
	2A3EA60D4C85B3DD62A556BFD26B16C9068F60140004E5B1EFD41395 
	A63447DAAEE0CF52931E944E63B429F52788CE485467B78FE8AC7E27
	8CFAE4F17C6F2F913FFA4A186CDAE70293D4BFAA8A292E9BA14163FA 
	409D4A1C594297981CDFB15E999EF94DFDE55DB22A200E87B1D6B3E8 
	F3FD83842CEF289F467FEC46F3E180AE36F4D2722BABBEE23E7578CD 
	11E3FDDF22528CDC830FDBF38D5B7CD45364B75C72ACFF76EB3FB887 
	8725853B5EA14809BA5E8CF9A30F805AC91D346FBD6679E615ABB417 
	7AE8256A6D0FC07E0E33BF2A88C84CA950C64B1A0BB6152DFC0D714B 
	95C07DE7262B73715CEF2BC3D3A7
dnssec.iks-jena.de.     3512    IN      TYPE46  \# 166
000205030000E100441F2B7143F79E71037A06646E7373656308696B 
	732D6A656E610264650032EFE01FFBAE07CAC4B0E7F6E6E243705DF4 
	FC5BA0280090B06D3A92C3AA6D29FA2FEC3496E013CD61FA86FE6A11 
	B6020646C848023BEFD748E89B7D30E80C141B15800E922B7F0ADF0C 
	6FE4D6B8C027CF003293719F291FDC9616C4FD0CE229BC56D4BB2300 
	7CA3E8C9301051E91D51D1EDBC3D6CAD593516EBAE290E187335
dnssec.iks-jena.de.     3512    IN      TYPE46  \# 166
000605030000E1004429BED7440231D7037A06646E7373656308696B 
	732D6A656E61026465009154AE475E2A83424BB38FDA4A5DF05D8177 
	7FBF7A2DFE165962E1A10335E3037262AE5963D6B4F3D4601552DAFF 
	47BA8979FB4958F62107CBBCDF46691C7C8F82E6BEA2046B22FE359E 
	C417299C695D2A2837B040713BFBD6524F4E6841C3574375F7A0866E 
	1CEAFB4C27BF8968F87959D520EB9DD787611931495894744655
dnssec.iks-jena.de.     3512    IN      TYPE46  \# 166
002F050300000E1044254CBC43FDBFBC037A06646E7373656308696B 
	732D6A656E61026465006015226113998270879DA328B98726891973 
	88D5347D6D29EB0B0CC51306BBDC2FD39F7385B17170AC6CA9B282C3 
	5E5380642CFD73CEDAE836B96F77322D878080D30F8F0E81C7C298B8 
	587118734C568778A3FA964A5ACDD6CC6EB920644A16E815A8FF7FE9 
	5F6635FB19E45EE5E6597DAAAD5A46B2C604335213A46B19E96C
dnssec.iks-jena.de.     3512    IN      TYPE46  \# 166
003005030000E100441F2B7143F79E71037A06646E7373656308696B 
	732D6A656E610264650058453B4AF3C6CC1CBA508C688C31DF5F759E 
	BBA587A64A09F0F6B3A0232A72E737EFCB554C77DAA9532EBA3F43F6 
	F92AC3D8F23393E79AC3E90B806718B6B2F52C71DD5F2EB5BF67E618 
	8B89D1FAA7842D7762834F9AA507E140A173BA2E631FA8B496F76F5E 
	5B89606CCF735345B3CD282E83351C3F7E95A74ED71277345EAB
dnssec.iks-jena.de.     57512   IN      SOA     avalon.iks-jena.de.
	hostmaster.iks-jena.de. 
	2006022702 
	10800 
	3600 
	3600000 
	3600
dnssec.iks-jena.de.     57512   IN      NS      avalon.iks-jena.de.

;; AUTHORITY SECTION:
dnssec.iks-jena.de.     57512   IN      NS      avalon.iks-jena.de.

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Feb 27 13:09:35 2006
;; MSG SIZE  rcvd: 1631

- Sander