Query regarding dig output

[Stephane Bortzmeyer]

On Tue, Nov 15, 2011 at 06:11:32PM +0530,
 Gaurav Kansal <gaurav.kansal at nic.in> wrote 
 a message of 415 lines which said:

> And when I am query through dig for same nkn.in domain with +dnssec
> parameter, 

Something that you did not post. Such a test does not appear in your
original email.

nkn.in is not signed and using +dnssec or no changes nothing.


% dig nkn.in

; <<>> DiG 9.7.3 <<>> nkn.in
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38542
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 4

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;nkn.in.				IN	A

;; ANSWER SECTION:
nkn.in.			86400	IN	A	164.100.56.206

;; AUTHORITY SECTION:
nkn.in.			86400	IN	NS	ns2.nkn.in.
nkn.in.			86400	IN	NS	ns3.nkn.in.
nkn.in.			86400	IN	NS	ns1.nkn.in.

;; ADDITIONAL SECTION:
ns1.nkn.in.		86400	IN	A	180.149.63.3
ns2.nkn.in.		86400	IN	A	180.149.63.66
ns3.nkn.in.		86400	IN	AAAA	2405:8a00:1000::2

;; Query time: 492 msec
;; SERVER: ::1#53(::1)
;; WHEN: Tue Nov 15 13:49:18 2011
;; MSG SIZE  rcvd: 165



% dig +dnssec nkn.in

; <<>> DiG 9.7.3 <<>> +dnssec nkn.in
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18735
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 4

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;nkn.in.				IN	A

;; ANSWER SECTION:
nkn.in.			86392	IN	A	164.100.56.206

;; AUTHORITY SECTION:
nkn.in.			86392	IN	NS	ns2.nkn.in.
nkn.in.			86392	IN	NS	ns3.nkn.in.
nkn.in.			86392	IN	NS	ns1.nkn.in.

;; ADDITIONAL SECTION:
ns1.nkn.in.		86392	IN	A	180.149.63.3
ns2.nkn.in.		86392	IN	A	180.149.63.66
ns3.nkn.in.		86392	IN	AAAA	2405:8a00:1000::2

;; Query time: 0 msec
;; SERVER: ::1#53(::1)
;; WHEN: Tue Nov 15 13:49:26 2011
;; MSG SIZE  rcvd: 165