An authoritative list of public name servers supporting DNSSEC.

Keys Used in DNSSEC

DNSSEC Testing

Domain DNSSEC

• DNSViz.net
• VeriSign Labs
• DNS Name & Shame
• ZoneMaster France

End-User DNSSEC

• Internet NL
• DNSSEC or Not

nsupdate

Protocol/Port

Network port/protocol used: 53/udp or 53/tcp (using -v option)

Note: rndc uses:

• 953/udp with any key-file (defaults to rndc-key, or
• named-generated file-based key in /var/lib/bind/session.key.

nsupdate commands

server

Using `server server-ip` will perform the following with unexpected result (if …

The table below summarizes the usage and frequency of use for each of the keys.:

ZSK vs. KSK Comparison

DNSSEC Two Steps

Signing your domain with DNSSEC involves two components:

1. The registrar of your domain name needs to be able to accept what are called “Delegation Signor (DS)” records and be able to send those up to the Top-Level-Domain (TLD) for your domain (ex. .com, .org, .net).
2. The DNS …