下面 233.5.5.5 、180.184.1.1 、114.114.114.114 等分别是阿里云、腾讯、百度、字节跳动的 DNS 检验结果。
国内竟然都不支持 DNSSEC ，难不成是为了方便劫持？
(base) ➜ ~ dig +dnssec cf.com @180.184.1.1 |grep QUE|grep flags
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
(base) ➜ ~ dig +dnssec cf.com @119.29.29.29 |grep QUE|grep flags
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
(base) ➜ ~ dig +dnssec cloudflare.com @180.76.76.76 |grep QUERY |grep flags
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
(base) ➜ ~ dig +dnssec cloudflare.com @114.114.114.114 |grep QUERY |grep flags
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
(base) ➜ ~ dig +dnssec cloudflare.com @114.114.114.114 |grep QUERY |grep flags
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
(base) ➜ ~ dig +dnssec cloudflare.com @8.8.8.8 |grep QUERY |grep flags
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
(base) ➜ ~ dig +dnssec cloudflare.com @1.1.1.1 |grep QUERY |grep flags
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
