Busca Registro DS
Veja registros de Assinante de Delegação para validação DNSSEC.
Como Usar Esta Ferramenta
- O Que Inserir
- Enter a domain to check its DS (Delegation Signer) records at the parent zone.
- O Que Você Obtém
- Shows DS records with key tag, algorithm, digest type, digest value, and whether they match the corresponding DNSKEY records.
Como Interpretar os Resultados
DS records at the parent zone should match the DNSKEY records in the child zone. Algorithm 13 (ECDSAP256SHA256) or 8 (RSASHA256) are recommended. Digest type 2 (SHA-256) is preferred over type 1 (SHA-1). Missing DS records mean the DNSSEC chain is broken even if the zone is signed.
Problemas Comuns e Soluções
Stale DS records after key rollover break the chain of trust. Algorithm mismatch between DS and DNSKEY causes validation failures. Some registrars do not support all DNSSEC algorithms.