DNSSEC-OFF
DNSSEC is not enabled
What it means
DNSSEC lets resolvers verify that DNS answers are genuine, which blocks cache poisoning. It is optional and adds operational risk if keys are not managed well.
How to fix it
- 1If your DNS host offers one-click DNSSEC with automatic key rollover, enable it and publish the DS at the registrar.
Re-check after the change
DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.
