Skip to main content

dig like command line utility to understand DNSSEC

Project description


Build Status

dig like command line utility to understand DNSSEC.


pip install digsec


Just run digsec to see options and help, or see this blog post .


  • digsec do not add DNS flags implicitly. You might need to use +rd (recursive desired) often.

  • see scripts/ and run it to see a full validation.


ECDSAP384SHA384, RSA-512 and SHA-384 support is not tested. If you know a domain using these algorithms, please let me know.

Release History


  • rsa update in 0.7 broke the build, this version fixes the issue.


  • required packages (rsa and ecdsa) are updated to latest version


  • Socket timeout support and +timeout flag.


  • Preliminary support for ECDSAP384SHA384, RSA-512, SHA-384.
  • Server the DNS packet is sent is written under NETWORK COMMUNICATION line.
  • digsec version is written at first line in the output as digsec vX.


  • ECDSAP256SHA256 implemented.
  • @server option added.
  • script added.

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

digsec-0.7.1.tar.gz (19.9 kB view hashes)

Uploaded source

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Huawei Huawei PSF Sponsor Microsoft Microsoft PSF Sponsor NVIDIA NVIDIA PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page