نحوه چک کردن درستی DNSSEC

نحوه چک کردن درستی DNSSEC

A good tool that you can use to check DNSSEC is located at http://dnssec-debugger.verisignlabs.com

Enter your domain into the search box and hit Enter on your keyboard:

When you first enable DNSSEC on your website, it will show your zone as ‘signed’ but ‘insecure’ (DS records are found, however, DNSKEY and RRSIG do not exist):

Once your registrar has published the DS records, which may be immediately or one or two days after you’ve added the DS record to your registrar, your records will be marked as ‘secure’ ones:

That’s it!