dnssec

dig flags : +norecurse – don’t ask nameserver to do recursion +[no]additional, +[no]authority, +[no]answer, +[no]all, etc. – [don’t] print the section indicated +short – provide the shortest possible output +trace – trace