DNSSEC checker

Is this domain protected against forged DNS answers, and is the chain of trust intact?

Live lookupPlain English + technicalFree, no sign-updnssec.middle.network
Try:

About the DNSSEC validation

Check whether a domain is signed with DNSSEC, whether the DS record at the registry matches its DNSKEY, and which algorithms are used.

Every result comes in two styles: plain English for everyone, and the exact technical detail for engineers, with the raw JSON one click away.

Questions

Yes, if your DNS provider supports automatic signing. It stops attackers forging DNS answers.