The DNSSEC status of the domain could not be determined.

DNSSEC_INDETERMINATE · Severity: Warning

• WarningDNSSEC_INDETERMINATE

  The DNSSEC status of the domain could not be determined.

  The resolver answers did not allow a clear result, for example because a lookup failed or a DS record exists but the answer was not validated. The status is reported as unknown instead of a guess.

  Recommendation: Retry the check later.

Reported by

• DNSSEC check
• Domain health check

Available through the API

• DNSSEC check API
• Domain health check API

Related findings

• Error DNSSEC_BOGUS DNSSEC validation fails for the domain.
• Warning DNSSEC_DEPRECATED_ALGORITHM The zone uses a DNSSEC algorithm that should no longer be used.
• Error DNSSEC_DS_WITHOUT_DNSKEY A DS record has no DNSKEY with the same algorithm.
• Info DNSSEC_NOT_SIGNED The domain is not signed with DNSSEC.
• Warning DNSSEC_SHA1_DIGEST A DS record uses a SHA-1 digest.

All findings