dnssec-name-and-shame.com

Look at a domain and check for DNSSEC records. Naming and shaming included!

Initially developed during The Next Web’s Kings of Code Hack Battle 2014 in Amsterdam, The Netherlands.

Notes

This implementation only checks a domain for signed A, AAAA, CNAME, MX and SOA records. You might want to try another tool for more extensive DNSSEC tests and analysis.
Lookups are cached in getdns’ context for the duration of the server’s uptime. DNS record TTL should also be in effect.
Source code, project page.

Requirements

getdns, see getdnsapi.net.
node.js and Node Package Manager npm (NPM).
MongoDB.
Bower.

Getting started

Make sure getdns is installed properly, including unbound’s root anchor. If the root anchor isn’t set up properly, all DNS lookups will be labeled insecure.
Make sure mongodb is running.

# Clone the repository
git clone --recursive https://github.com/joelpurra/node-dnssec-name-shame.git node-dnssec-name-shame
cd node-dnssec-name-shame

# Install dependencies
npm install
./node_modules/.bin/bower install

# Start the server. Note that logging is in bunyan's json format.
npm start

Browse to your local test site, https://localhost:5000/.

Development

# Start the server in debugging mode
npm run debug

# Test the code
npm test --silent

Optionally debug the server, possibly using Chrome DevTools for Node.js.

Todo

☐ Fetch Alexa’s top 25 (or more) sites dynamically. ☐ Create pretty-pretty slide show style animations for the listed example domains? ☑ Modify links to the external sites to open in new window, and add link to /domain/example.com so content can be discovered. ☑ Tweet the results. ☑ Add sounds for pass and fail. ☑ Create a small API. ☑ Download Google Fonts and serve locally: google-font-download "Quando" "Pacifico" "'Open Sans'".

Thanks

Versign Labs.
NLnet Labs, with special thanks to Willem Toorop (@wtoorop) for all the help with the DNAS server(s).
Anne-Marie Eklund Löwinder, DNSSEC pioneer and Internet Hall of Fame inductee, for the photo made specially for this site.
Photo of Anne-Marie Eklund Löwinder by Per-Ola Mjömark, licensed under CC BY 4.0.
Fail sound buzzer2.wav by hypocore, licensed under CC0 1.0.
Success sound success.wav by grunz, licensed under CC BY 3.0.

License

When using node-dnssec-name-shame, comply to the GNU Affero General Public License 3.0 (AGPL-3.0). Please see the LICENSE file for details.