DNS lookup
Check domain DNSSEC configuration and validate chain of trust
Insecure
google.com
NS: ns2.google.com, ns4.google.com, ns3.google.com, ns1.google.com
Registrar: MarkMonitor, Inc. — DNSSEC: unsigned
Checklist
Registrar DNSSEC delegation
DNSKEY records present
DS records present
DS matches DNSKEY
RRSIG signatures valid
Chain of trust complete (AD bit)
Issues Found
- DNSSEC is not enabled for this domain (no DNSKEY records found)