Domain Detective

API Reference

Class

DnsSecInfo

Namespace DomainDetective
Assembly DomainDetective

DNSSEC validation results in a simplified form.

Inheritance

  • Object
  • DnsSecInfo

Remarks

The class aggregates DS, DNSKEY and RRSIG information for easy consumption by tools that don't require full record details.

Usage

This type appears in these public API surfaces even when no hand-authored example is attached directly to the page.

Accepted by parameters

Constructors

Properties

public IReadOnlyList<DsRecordInfo> DsRecords { get; set; } #

Returned DS records.

public IReadOnlyList<DnsKeyInfo> DnsKeys { get; set; } #

Returned DNSKEY records.

public IReadOnlyList<String> Signatures { get; set; } #

DNSSEC signature records.

public IReadOnlyList<RrsigInfo> Rrsigs { get; set; } #

Structured RRSIG records.

public Boolean AuthenticData { get; set; } #

True when the DNSKEY query had the AD flag set.

public Boolean DsAuthenticData { get; set; } #

True when the DS query had the AD flag set.

public Boolean DsMatch { get; set; } #

Indicates whether the DS record matches the DNSKEY.

public Boolean ChainValid { get; set; } #

True when the entire DNSSEC chain validated.

public IReadOnlyList<Int32> DsTtls { get; set; } #

TTL values for each DS lookup in the validation chain.

public Int32 RootKeyTag { get; set; } #

Key tag for the root trust anchor.

public Nullable<DateTimeOffset> RootAnchorExpiration { get; set; } #

Expiration time of the root trust anchor if known.

public Boolean KeyExpiresSoon { get; set; } #

True when the validator detected keys or signatures expiring soon.

public IReadOnlyList<String> MismatchSummary { get; set; } #

Descriptions of any mismatches encountered.

public IReadOnlyList<String> Warnings { get; set; } #

Human-readable warnings produced during validation.

public Boolean UsedLocalValidation { get; set; } #

True when local DNSSEC validation was enabled for the run.

public IReadOnlyList<Assessment> Assessments { get; set; } #

Structured assessments gathered during DNSSEC validation.

{{ include "footer" }}