Glossary
DNSSEC
DNSSEC adds cryptographic signatures to DNS answers, so a resolver can check that they weren't forged or altered. For a TLD to be "DNSSEC-signed", the root zone must hold a DS record for it, linking the chain of trust from the root down.
Nearly every TLD is signed today. Whether your own domain is protected also depends on your DNS provider signing your zone and your registrar publishing a DS record for it.
Try it
- DNS lookup tool ↗ · Atak Domain, our sister service
