edns.dnsp.co

What the last machine in the chain negotiated with us.

What it does

EDNS(0) carries the extras modern DNS depends on: a larger payload size, the DNSSEC request bit, and cookies. This test reports what arrived, which describes whichever machine sent us the query rather than you.

Example

$ dig @dnsp.co edns.dnsp.co TXT +short

"payload=1232 do=1 cookie=yes"

Reading the answer

a large payload size

Big answers can arrive over UDP without falling back to TCP.

do=1

DNSSEC records were requested, which is a prerequisite for validation.

cookie=yes

The resolver uses DNS cookies, a defence against off-path spoofing.

Notes

Through a resolver this describes the resolver, not your machine. Aim it directly to see your own client.