The domain is not signed with DNSSEC.

DNSSEC_NOT_SIGNED · Severity: Info

• InfoDNSSEC_NOT_SIGNED

  The domain is not signed with DNSSEC.

  The parent zone publishes no DS record for the domain, and the validating resolver did not authenticate the answer. Resolvers accept the domain's answers without a signature check, so a forged answer cannot be detected.

  Recommendation: Consider signing the zone if your DNS provider supports it, and publish the DS record at your registrar.

Reported by

• DNSSEC check
• Domain health check

Available through the API

• DNSSEC check API
• Domain health check API

Related findings

• Error DNSSEC_BOGUS DNSSEC validation fails for the domain.
• Warning DNSSEC_DEPRECATED_ALGORITHM The zone uses a DNSSEC algorithm that should no longer be used.
• Error DNSSEC_DS_WITHOUT_DNSKEY A DS record has no DNSKEY with the same algorithm.
• Warning DNSSEC_INDETERMINATE The DNSSEC status of the domain could not be determined.
• Warning DNSSEC_SHA1_DIGEST A DS record uses a SHA-1 digest.

All findings