What DNSSEC validates
DNSSEC lets a validating resolver verify that signed DNS data came from the expected zone and was not modified in transit. It adds a chain of trust from a signed parent delegation to signed records in a child zone.
What DNSSEC does not do
DNSSEC does not encrypt DNS queries, hide domain data or secure HTTPS by itself. A broken DS or signing configuration can also make a domain appear unavailable to validating resolvers, so enable it only when the DNS provider supports a safe workflow.
Check real data now
Use the live IIPP tool to inspect the domain or IP address you are working with.
DNS Record Lookup →