分享一个在线 DNS 检测工具

[swordspoet]

https://dnscheck.tools/

[MC]

是不是完蛋了

Oh no! Your DNS responses are not authenticated with DNSSEC:
ECDSA P-256 ECDSA P-384 Ed25519
Valid signature PASS PASS PASS
Invalid signature FAIL FAIL FAIL
Expired signature FAIL FAIL FAIL
Missing signature FAIL FAIL FAIL

[itiao]

Great! Your DNS responses are authenticated with DNSSEC:
ECDSA P-256 ECDSA P-384 Ed25519
Valid signature PASS PASS PASS
Invalid signature PASS PASS PASS
Expired signature PASS PASS PASS
Missing signature PASS PASS PASS

[Crystalman]

ECDSA ECDSA Ed25519
P-256 P-384
Valid signature PASS PASS PASS
Invalid signature FAIL FAIL FAIL
Expired signature FAIL FAIL FAIL
Missing signature FAIL FAIL FAIL
```
这是我的结果，能帮我分析下什么意思吗

[Crystalman]

@Crystalman Oh no! Your DNS responses are not authenticated with DNSSEC:

```
ECDSA ECDSA Ed25519
P-256 P-384
Valid signature PASS PASS PASS
Invalid signature FAIL FAIL FAIL
Expired signature FAIL FAIL FAIL
Missing signature FAIL FAIL FAIL
```

[peasant]

process-no-validate
Respond with DNSSEC records to clients that ask for it, set the DO bit on all outgoing queries. Don’t do any validation.
process
Respond with DNSSEC records to clients that ask for it, set the DO bit on all outgoing queries. Do validation for clients that request it (by means of the AD- bit or DO-bit in the query).

@MC
@Crystalman
Valid signature PASS 其他 FAIL 的原因是 DNS 递归解析器没有做 DNSSEC 的验证。

[nctllnty]

```
Great! Your DNS responses are authenticated with DNSSEC:
ECDSA P-256 ECDSA P-384 Ed25519
Valid signature PASS PASS PASS
Invalid signature PASS PASS PASS
Expired signature PASS PASS PASS
Missing signature PASS PASS PASS

```

[swordspoet]

1. dns 出口查询工具： https://ip.skk.moe/dns-exit-lookup
2. 网站分流测试： https://ip.skk.moe/split-tunnel
3. 分流测试： https://ipcheck.ing/#/ruletest