Domain Name System Security Extensions (DNSSEC) 4 October 2012

DANE Test Sites

The following sites support the DANE protocol by publishing TLSA records. If you are developing software that supports the DANE protocol, you can visit these sites to test your DANE support.  Note that we use the term “TLS certificate” here for what is commonly referred to as a “SSL certificate”.

Test sites updated on 30 October 2017.  Thanks to Stephane Bortzmeyer for his testing.

Sites that provide tests for DANE records

HTTP – Valid TLSA Record With Valid CA-signed TLS Certificate

SMTP

The following sites support using DANE for email by publishing TLSA records associated with MX records:

  • ietf.org
  • openssl.org
  • jhcloos.com
  • nlnetlabs.nl (for ports 25, 465, 587)
  • nlnet.nl (for ports 25, 465, 587)
  • spodhuis.org
  • denic.de

XMPP / Jabber

The following sites support using DANE for TLS connections to their XMPP/Jabber server:

Related articles

Building Trust 1 October 2017

DNSSEC

The Domain Name System (DNS), the Internet’s addressing system, is the most critical component of the Internet infrastructure. As...

Deploy360 3 April 2017

Introduction to PKIs & CAs

In order to be trusted, the Internet must provide channels for secure and private communication between entities, which can...

Domain Name System (DNS) 31 December 2016

State of DNSSEC Deployment 2016

This report provides a snapshot of the state of deployment of DNSSEC as of the end of 2016. Please download...