~/tools / dnssec-checker

DNSSEC Checker

Check whether a domain has DNSSEC signing enabled. Shows DNSKEY presence at the domain and DS presence at the parent zone - both are required for a valid chain of trust.

>
[ OK ] Fully DNSSEC-signed - DNSKEY and DS both present.
── output ─────
Signed overall
[ YES ]
DNSKEY
[ 2 records ]
DS (parent)
[ 1 record ]
// Full chain validation (RRSIG, DS hashes, algorithm support) not performed here - use DNSViz or Verisign Labs for deep analysis.
// Save lepoint.fr → we'll run this daily and alert on changes. /signup →