Want a quick way to check if you have DNSSEC validation working at your site? Just go to:
https://www.dnssec-tools.org/test/
You’ll see either a thumbs-up or a thumbs-down:
If you get a thumbs-up then all the DNS queries were validated with DNSSEC. If you get a thumbs-down then your local DNS resolver is either not validating with DNSSEC or is not validating all queries. Time to figure out what’s wrong!
If you need to configure DNSSEC validation, we recommend SURFnet’s white paper that includes easy steps for common DNS resolvers.
And if you know very little about DNSSEC and want to learn more, please visit our Start Here page to begin!