DNSSEC Resolver Validation
See whether public validating resolvers report a domain as DNSSEC signed, and compare their answers side by side.
Shortcuts: / or Ctrl+L to focus, Esc to return
Frequently Asked Questions about DNSSEC
- What is DNSSEC?
- DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS data to ensure its authenticity.
- How does DNSSEC improve security?
- It prevents attackers from spoofing DNS responses by allowing resolvers to verify that data comes from the legitimate source.
- How can I check my domain's DNSSEC status?
- Enter your domain to see the DNSSEC status public validating resolvers report for it, and whether they agree.
- Why would a resolver report DNSSEC as failing?
- Missing DS records, expired signatures, or mismatched keys cause validating resolvers to reject the answer.
- Do I need DNSSEC for my domain?
- DNSSEC is recommended to protect users from DNS spoofing and ensure the integrity of your domain's DNS records.