To add or update DS records, configure them in your DNS zone file and then update your parent zone with the new DS records.
A DS record links to a DNSKEY record in the parent zone, providing a hash of the DNSKEY for verification. The DNSKEY record contains the actual public key used for DNSSEC.
Use the DS Records Lookup tool to compare the key tag and digest values with those in your DNSKEY record to ensure they match.
Mismatched DS records can lead to DNSSEC validation failures, potentially causing issues with DNS resolution and domain security.
Yes, the tool works regardless of your DNS provider, as long as the domain has DS records configured in the DNS zone.
Regularly check DS records, especially after making changes to DNSKEYs or DNSSEC configurations, to ensure continued validity.
Yes, consult DNSSEC documentation, RFC 4034, and RFC 4035 for detailed information on DS record formats and DNSSEC specifications.
While the tool helps verify DS records, for deployment issues, review your DNSSEC configuration and consult additional resources or support.
The tool complements other DNS security tools by providing specific verification for DS records, helping ensure overall DNSSEC integrity.
Double-check your DNSSEC configuration, ensure DS records are properly propagated, and consult with your DNS provider for further assistance.
Our Happy Clients
1000+Emails
143,887Compliant
136,696Failures
5,399Countries
60+Domains Analyzed
27,000+Download to read the eBook
