<html><head><meta http-equiv="content-type" content="text/html; charset=us-ascii"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hi all,<div><br></div><div><div>I have a vanilla, standalone, unbound v1.16 installation as packaged on RHEL9 on localhost, and this is successfully verifying DNSSEC for the domain <a href="http://nlnet.nl/">nlnet.nl</a>:</div><div><br></div><div><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">[root@seawitch ~]# dig TLSA +dnssec _25._<a href="http://tcp.open.nlnet.nl/">tcp.open.nlnet.nl</a></span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 14px;"><span style="font-variant-ligatures: no-common-ligatures;"></span><br></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">; <<>> DiG 9.16.23-RH <<>> TLSA +dnssec _25._<a href="http://tcp.open.nlnet.nl/">tcp.open.nlnet.nl</a></span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; global options: +cmd</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; Got answer:</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24103</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 14px;"><span style="font-variant-ligatures: no-common-ligatures;"></span><br></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; OPT PSEUDOSECTION:</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">; EDNS: version: 0, flags: do; udp: 1232</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; QUESTION SECTION:</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;_25._<a href="http://tcp.open.nlnet.nl/">tcp.open.nlnet.nl</a>.<span class="Apple-tab-span" style="white-space: pre;"> </span>IN<span class="Apple-tab-span" style="white-space: pre;"> </span>TLSA</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 14px;"><span style="font-variant-ligatures: no-common-ligatures;"></span><br></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; ANSWER SECTION:</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">_25._<a href="http://tcp.open.nlnet.nl/">tcp.open.nlnet.nl</a>.<span class="Apple-tab-span" style="white-space: pre;"> </span>3400<span class="Apple-tab-span" style="white-space: pre;"> </span>IN<span class="Apple-tab-span" style="white-space: pre;"> </span>TLSA<span class="Apple-tab-span" style="white-space: pre;"> </span>3 1 1 4B70D5B3226B7D7C5D09FE40C4D2B7534F9BDBAD6735FBA388C8BBF9 2C4446AC</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">_25._<a href="http://tcp.open.nlnet.nl/">tcp.open.nlnet.nl</a>.<span class="Apple-tab-span" style="white-space: pre;"> </span>3400<span class="Apple-tab-span" style="white-space: pre;"> </span>IN<span class="Apple-tab-span" style="white-space: pre;"> </span>RRSIG<span class="Apple-tab-span" style="white-space: pre;"> </span>TLSA 8 5 3600 20241116121646 20241017121646 38979 <a href="http://nlnet.nl/">nlnet.nl</a>. CbZ5jQNU21Ne9N2cY4BLowAA6vXuRyueTZPHFtk6ZD6m4jStHJPfOgSF QN+3pGhqnf1qGQUQeQvfrETzjFz7vN1StMVpA+dv/WTaAwtMCtm/aIl+ 8/0WmB0SVAxRFfmZsEnV4RKymZjDhlz207wK8LyvNjdKWx5EJxwLfVqI 4Ts=</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 14px;"><span style="font-variant-ligatures: no-common-ligatures;"></span><br></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; Query time: 0 msec</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; SERVER: ::1#53(::1)</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; WHEN: Fri Nov 08 11:09:44 SAST 2024</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; MSG SIZE rcvd: 266</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 14px;"><span style="font-variant-ligatures: no-common-ligatures;"></span><br></p></div><div>The exact same localhost unbound server returns no ad flag on a request for <a href="http://sharp.fm/">sharp.fm</a>, and as a result DANE fails.</div><div><br></div><div><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">[root@seawitch ~]# dig TLSA +dnssec _25._<a href="http://tcp.aurora.sharp.fm/">tcp.aurora.sharp.fm</a></span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 14px;"><span style="font-variant-ligatures: no-common-ligatures;"></span><br></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">; <<>> DiG 9.16.23-RH <<>> TLSA +dnssec _25._<a href="http://tcp.aurora.sharp.fm/">tcp.aurora.sharp.fm</a></span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; global options: +cmd</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; Got answer:</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60479</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 14px;"><span style="font-variant-ligatures: no-common-ligatures;"></span><br></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; OPT PSEUDOSECTION:</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">; EDNS: version: 0, flags: do; udp: 1232</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; QUESTION SECTION:</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;_25._<a href="http://tcp.aurora.sharp.fm/">tcp.aurora.sharp.fm</a>.<span class="Apple-tab-span" style="white-space: pre;"> </span>IN<span class="Apple-tab-span" style="white-space: pre;"> </span>TLSA</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 14px;"><span style="font-variant-ligatures: no-common-ligatures;"></span><br></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; ANSWER SECTION:</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">_25._<a href="http://tcp.aurora.sharp.fm/">tcp.aurora.sharp.fm</a>. 30<span class="Apple-tab-span" style="white-space: pre;"> </span>IN<span class="Apple-tab-span" style="white-space: pre;"> </span>TLSA<span class="Apple-tab-span" style="white-space: pre;"> </span>3 1 0 3076301006072A8648CE3D020106052B810400220362000421C2B37A C32039564CC3028EC8F1011D033B9CC6024234902F1EAE7923ED908B 7DF1939EC97F46D26B0EA8EBAC4A85412EAD4F4C67292E84FB77A5A5 7ECD5AD019777C6FA86E609C099C4383C534E59EA5C4BC8C9C1AD3B0 C85EA382DE3A1E55</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">_25._<a href="http://tcp.aurora.sharp.fm/">tcp.aurora.sharp.fm</a>. 30<span class="Apple-tab-span" style="white-space: pre;"> </span>IN<span class="Apple-tab-span" style="white-space: pre;"> </span>RRSIG<span class="Apple-tab-span" style="white-space: pre;"> </span>TLSA 7 5 300 20241111184324 20241028171005 11022 <a href="http://sharp.fm/">sharp.fm</a>. cmsFz4QPB4eUh9IVM3TOiAN182zurMUU7u1a4e7EPmlvwjUxpYhDUqR8 ob+MCfplOl6YtpdeaMR1XgXf3OULKVlc54JLTD7AQdeIINHJUjXGCtzM JvXltFwwcoPzcUq/HqdAcJixJvqbq1kysReq2pGK0SLUXwZjYAgf+253 Q9I=</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 14px;"><span style="font-variant-ligatures: no-common-ligatures;"></span><br></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; Query time: 0 msec</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; SERVER: ::1#53(::1)</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; WHEN: Fri Nov 08 11:36:34 SAST 2024</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;"><span style="font-variant-ligatures: no-common-ligatures;">;; MSG SIZE rcvd: 356</span></p><p style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 14px;"><span style="font-variant-ligatures: no-common-ligatures;"></span><br></p></div><div>If I use the <a href="http://unboundtest.com/">http://unboundtest.com/</a> checker with logs of debug logging, I get no warnings, and no errors, just no ad flag as before.</div><div><br></div><div>What I need is some kind of diagnostic message to tell us why the ad flag is missing / validation of DNSSEC has failed, but I am not seeing this anywhere.</div><div><br></div><div>Obviously answering the question "why doesn't this particular thing work" is a short term goal, but in the longer term our ops people are going to have to debug this if it goes wrong, and right now there seems no diagnostics to go on.</div><div><br></div><div>Does this make sense?</div><div><br></div><div>Regards,</div><div>Graham</div><div>--</div></div></body></html>