DNSSEC Check
Verify DNSSEC protection and validation status.
What this test checks
Validation status and the evidence returned by the resolver.
Why this matters
A secure, insecure, bogus, and indeterminate DNSSEC result have different meanings; absence of DNSSEC is not automatically an outage.
How to fix common problems
Treat BOGUS as urgent. For INSECURE, decide whether DNSSEC is appropriate for your zone before enabling it.
FAQ
Is INSECURE the same as BOGUS?
No. Insecure means unsigned; bogus means signatures could not validate.