Struct DnssecReport 

pub struct DnssecReport {
    pub domain: String,
    pub enabled: bool,
    pub has_ds_records: bool,
    pub has_dnskey_records: bool,
    pub ds_records: Vec<DsInfo>,
    pub dnskey_records: Vec<DnskeyInfo>,
    pub issues: Vec<String>,
    pub status: String,
    pub chain_valid: bool,
    pub authentication_tier: AuthenticationTier,
    pub rrsig_records: Vec<RrsigInfo>,
}

DNSSEC validation report for a domain.

Fields

domain: String

The domain that was checked.

enabled: bool

Whether the domain has DNSSEC enabled.

has_ds_records: bool

Whether DS records exist at the parent zone.

has_dnskey_records: bool

Whether DNSKEY records exist at the domain.

ds_records: Vec<DsInfo>

DS records found at the parent zone.

dnskey_records: Vec<DnskeyInfo>

DNSKEY records found at the domain.

issues: Vec<String>

Validation issues found.

status: String

Overall status: “signed”, “unsigned”, “partial”, or “misconfigured”.

IMPORTANT: this reflects DS↔DNSKEY digest consistency (RFC 4509) observed over plain, unauthenticated DNS. It does NOT verify any RRSIG signatures, signature validity periods, or a chain of trust to the root anchor. “signed” therefore means “the published DS and DNSKEY are digest-consistent”, NOT “the records are cryptographically authenticated” — an on-path or spoofing attacker can fabricate a self-consistent DS+DNSKEY pair. Do not treat this as proof of authenticity.

chain_valid: bool

Whether every DS record’s digest matches a published DNSKEY (RFC 4509 digest consistency). This is NOT signature / chain-of-trust validation — see the caveat on status.

authentication_tier: AuthenticationTier

Machine-readable tier describing the DEPTH of checking that was performed, so consumers don’t over-trust a digest-only “signed” result. The RESULT of those checks lives in chain_valid / status / issues; this field says only what was checked.

rrsig_records: Vec<RrsigInfo>

RRSIG signatures observed over the zone apex, populated only when RRSIG validation is enabled (DnssecChecker::with_rrsig_validation(true)). Empty in the default fast path.

Trait Implementations

impl Clone for DnssecReport

fn clone(&self) -> DnssecReport

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DnssecReport

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DnssecReport

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for DnssecReport

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.