~/tools / dnssec-checker

DNSSEC Checker

Check whether a domain has DNSSEC signing enabled. Shows DNSKEY presence at the domain and DS presence at the parent zone — both are required for a valid chain of trust.

>
[ WARNING ] No DNSSEC — domain is not signed.
── output ─────
Signed overall
[ NO ]
DNSKEY
[ 0 records ]
DS (parent)
[ 0 records ]
// Full chain validation (RRSIG, DS hashes, algorithm support) not performed here — use DNSViz or Verisign Labs for deep analysis.
// Save barclays.co.uk → we'll run this daily and alert on changes. /signup →