Skip to content
whois.me.uk

DNSSEC-OFF

DNSSEC is not enabled

What it means

DNSSEC lets resolvers verify that DNS answers are genuine, which blocks cache poisoning. It is optional and adds operational risk if keys are not managed well.

How to fix it

  1. 1If your DNS host offers one-click DNSSEC with automatic key rollover, enable it and publish the DS at the registrar.

Re-check after the change

DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.