Trace delegation without DNSSEC noise

More dig commands

• Compare answers from two resolvers
  diff <(dig +short @1.1.1.1 example.com) <(dig +short @8.8.8.8 example.com)copy

  Spot split-horizon or stale cache differences between resolvers

• Reverse PTR lookup for IPv6
  dig -x 2606:4700:4700::1111 +shortcopy

  PTR for an IPv6 address; -x expands nibble format automatically

• Query TXT/SPF, DKIM and DMARC at once
  for r in example.com _dmarc.example.com sel._domainkey.example.com; do dig +short TXT $r; donecopy

  Pull SPF, DMARC and DKIM TXT records in one loop for mail audits

• Check CAA records before issuing certs
  dig +short CAA example.comcopy

  Show which CAs may issue certs; missing CAA lets any CA issue

• Resolve SRV records for service discovery
  dig +short SRV _sip._tcp.example.comcopy

  Get priority/weight/port/target for a service; used by AD, SIP, XMPP

all 11 dig commands →