DNSSEC-Tools being migrated -- expect broken links.
The process to convert older wiki pages to our new site is not yet complete; please be patient while we work through the moving process. -- 2018-08-11


The DO bit is a DNS Protocol bit that can be turned on to indicate the DNS client wishes to receive DNSSEC data in return.

Without the DO bit

Without the DO bit. # dig +dnssec www.dnssce-tools.org a

With the DO bit

With the DO bit. Running dig with the +dnssec flag will turn on the DO bit in the DNS protocol. Note that it now returns RRSIG records as well: