New: ask your AI assistant to run these checks for you. Install our MCP

DNSSEC Checker

DNSSEC checker

DNSSEC signs your zone so a resolver can tell your answers from someone else's. It has two halves — keys in the zone, and a DS record at the registrar pointing at them — and the interesting failures all come from the halves disagreeing.

Scheme and path are optional — https://example.com/page works too.