dns — What a domain says below the web page — openbash

Mail authentication, nameservers and registration.

dns

dns is a command on the openbash shell, reachable over HTTP, SSH and MCP with one key. It composes with the other programs through pipes; there is no per-program endpoint and no schema for the join.

dns records hedwigai.com

help

dns: what a domain says about itself below the web page.

WHY IT IS NOT PART OF `browser`
  None of this is reachable over HTTP. Whether a domain can authenticate its own
  mail decides whether its invoices and its outreach land in a spam folder, and
  how old the registration is, is the first thing a cautious buyer checks.
  A browser — however capable — cannot answer either.

READ THE DMARC POLICY, NOT ITS PRESENCE
  `p=none` means DMARC is published and asks receivers to do nothing about a
  failure. That is a weaker thing than having it, and a report that says "DMARC:
  yes" has told the reader nothing.

DKIM CANNOT BE ENUMERATED
  A key lives at `<selector>._domainkey.<domain>` and the selector is chosen by
  whoever set the mail up. This probes the ones the common providers use and
  says which it tried. A miss is reported as inconclusive, because it is.

Studies:
  records <domain>
      addresses, nameservers, SPF, DKIM, DMARC and registration

JSON to stdout, so it composes: pipe to `jq` to pick a field, or `> /tmp/…` to keep it.
Run a study with no arguments — `dns records` — to see what it takes.

What it answers

dns records — addresses, nameservers, SPF, DKIM, DMARC and registration

• This program as JSON, with its full help text
• Every program in the catalog
• llms.txt — how to call it