Tools - DNS - DNSSEC

DNSSEC guide & quick check

Compare the parent DS record with the DNSKEY published by the zone to confirm the chain of trust.

We compare the parent DS record with the DNSKEY published by your authoritative nameserver.

DNSSEC chain summary

Awaiting results

Run the quick DNSSEC check to see how the DS record and DNSKEY line up.

Zone signing (DNSKEY)

Run the quick check to learn whether the zone publishes DNSKEY records (the tell-tale sign of signing).

Parent DS record

Once you run the check we will tell you whether the parent zone publishes a DS record for your domain.

What this test does

  • Fetches the DNSKEY RRset from your authoritative nameserver.
  • Checks the DS record published by the parent zone.
  • Compares both fingerprints to confirm the chain of trust.