Trace delegation without DNSSEC noise dig
Follow delegation from root to authoritative, hiding RRSIG/DS clutter
dig +trace +nodnssec example.com
more dig
all 11 commands →
Compare answers from two resolvers
diff <(dig +short @1.1.1.1 example.com) <(dig +short @8.8.8.8 example.com)
Reverse PTR lookup for IPv6
dig -x 2606:4700:4700::1111 +short
Query TXT/SPF, DKIM and DMARC at once
for r in example.com _dmarc.example.com sel._domainkey.example.com; do dig +short TXT $r; done
Check CAA records before issuing certs
dig +short CAA example.com
Resolve SRV records for service discovery
dig +short SRV _sip._tcp.example.com