DNSSEC Validator

Check whether DNSSEC records (DNSKEY, RRSIG, DS) are present for a domain.

Domain Name

Examples

DNSSEC Validator

Checks for the presence of DNSKEY, RRSIG, and DS records to assess whether DNSSEC is configured for a domain.

What This Tool Checks

DNSKEY Records: Checks for zone signing keys that indicate DNSSEC is configured
RRSIG Records: Checks whether resource record signatures are present
DS Record: Checks for a delegation signer record in the parent zone
Chain of Trust: Reports whether all three record types are present (does not cryptographically verify signatures)
Recommendations: Guidance on enabling or completing DNSSEC setup

Note

This tool checks for the presence of DNSSEC-related DNS records. It does not perform cryptographic signature validation: it reports whether the records exist, not whether the signatures are mathematically valid.