‹ Back
Domain Name System Security Extensions (DNSSEC) 30 December 2011

Testing: DNSSEC Analyzer

If you want to test if DNSSEC is correctly implemented for a domain, a great tool is the “DNSSEC Analyzer” operated by Verisign Labs:

http://dnssec-debugger.verisignlabs.com/

You simply enter the domain name to be tested into the form and the free service will go to work:

DNSSEC analyzer

Here is an example of what a successful verification of DNSSEC functionality should look like (click on the image to see the actual results):

DNSSEC Analyzer for www.internetsociety.org

A nice feature of the service is that the URL reflects the site name you are testing (ex. http://dnssec-debugger.verisignlabs.com/www.internetsociety.org) which means that you can easily bookmark that URL to easily try it again if you are in the midst of debugging your DNSSEC configuration.

‹ Back

Related articles

Building Trust 1 October 2017

DNSSEC

The Domain Name System (DNS), the Internet’s addressing system, is the most critical component of the Internet infrastructure. As...

Deploy360 3 April 2017

Introduction to PKIs & CAs

In order to be trusted, the Internet must provide channels for secure and private communication between entities, which can...

Domain Name System (DNS) 31 December 2016

State of DNSSEC Deployment 2016

This report provides a snapshot of the state of deployment of DNSSEC as of the end of 2016. Please download...

Join the conversation with Internet Society members around the world