Secure Name Resolution Example

asking a localhost(127.0.0.1) caching server
with trusted-key for sec.jinmei.org

  % dig @127.0.0.1 foo.sec.jinmei.org +adflag

  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42462
  ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

  ;; QUESTION SECTION:
  ;foo.sec.jinmei.org. IN  A

  ;; ANSWER SECTION:
  foo.sec.jinmei.org.   86400 IN A 10.0.2.2

  ;; AUTHORITY SECTION:
  sec.jinmei.org.  600 IN NS  ns.sec.jinmei.org.