Domain Name System Security Extensions (DNSSEC) 30 December 2011

Testing: DNSSEC Analyzer

If you want to test if DNSSEC is correctly implemented for a domain, a great tool is the “DNSSEC Analyzer” operated by Verisign Labs:

http://dnssec-debugger.verisignlabs.com/

You simply enter the domain name to be tested into the form and the free service will go to work:

DNSSEC analyzer

Here is an example of what a successful verification of DNSSEC functionality should look like (click on the image to see the actual results):

DNSSEC Analyzer for www.internetsociety.org

A nice feature of the service is that the URL reflects the site name you are testing (ex. http://dnssec-debugger.verisignlabs.com/www.internetsociety.org) which means that you can easily bookmark that URL to easily try it again if you are in the midst of debugging your DNSSEC configuration.

Related articles

Deploy360 3 April 2017

Introduction to PKIs & CAs

In order to be trusted, the Internet must provide channels for secure and private communication between entities, which can...

Domain Name System (DNS) 31 December 2016

State of DNSSEC Deployment 2016

This report provides a snapshot of the state of deployment of DNSSEC as of the end of 2016. Please download...

Deploy360 7 October 2014

DNSSEC Fact Sheet

Looking for a quick way to explain DNSSEC to people?  Would you like a DNSSEC handout you could print...