Enum AuthenticationTier 

pub enum AuthenticationTier {
    Unsigned,
    DigestOnly,
    RrsigChecked,
}

The depth of DNSSEC verification performed for a DnssecReport.

This describes what was checked, not whether it passed — the pass/fail result is carried by DnssecReport::chain_valid and status. It exists so a consumer (or an MCP-driven LLM) does not read digest-consistency as full cryptographic authentication.

Variants

Unsigned

No DNSSEC records are published.

DigestOnly

Only DS↔DNSKEY digest consistency (RFC 4509) was checked — the default fast path. Does NOT inspect RRSIG signatures or their validity windows.

RrsigChecked

RRSIG signatures over the apex were additionally fetched and their validity windows inspected (expired / near-expiry surfaced in issues). Still not full cryptographic chain validation to the root.

Trait Implementations

impl Clone for AuthenticationTier

fn clone(&self) -> AuthenticationTier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AuthenticationTier

impl Debug for AuthenticationTier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthenticationTier

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AuthenticationTier

impl PartialEq for AuthenticationTier

fn eq(&self, other: &AuthenticationTier) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AuthenticationTier

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuthenticationTier