• Petr Špaček's avatar
    Test for www.nicmexico.mx. AD flag · 4888d7cd
    Petr Špaček authored
    Test with real world Internet data:
    Our attempt to resolve www.nic.mx A leads to CNAME www.nicmexico.mx.
    Sub-tree nic.mx is not signed and nixmexico.mx is signed.
    The answer must not have AD flag set!
    The first resolution process may polute cache with insecure records.
    Verify that answer for www.nicmexico.mx A has AD bit set!
    4888d7cd
world_mx_nic_www.rpl 12.9 KB