kdig's +nocrypto should omit crypto material in output
Yesterday I was querying the root zone for the newly introduced ZONEMD
record using kdig
. I normally use the +nocrypto
option, because most times, the actual crypto material is not useful for my human eyes. While kdig
hides the crypto material in DNSKEY records, it doesn't hide the hashes in DS, ZONEMD, TLSA and other similar records.
I wonder if the +nocrypto
option should also suppress printing other crypto material, instead of just DNSKEYs.