~/tools / dnssec-checker

DNSSEC Checker

Check whether a domain has DNSSEC signing enabled. Shows DNSKEY presence at the domain and DS presence at the parent zone — both are required for a valid chain of trust.

>
[ OK ] Fully DNSSEC-signed — DNSKEY and DS both present.
── output ─────
Signed overall
[ YES ]
DNSKEY
[ 2 records ]
DS (parent)
[ 1 record ]
// Full chain validation (RRSIG, DS hashes, algorithm support) not performed here — use DNSViz or Verisign Labs for deep analysis.
// Save bol.com → we'll run this daily and alert on changes. /signup →