DNSSEC-UNSECURED-DELEGATION
DNSKEY present but no DS at the parent
What it means
The zone is signed but nothing links it to the parent, so resolvers cannot validate it. Harmless, but the signing does nothing yet.
How to fix it
- 1Publish the DS record (from your DNS host) at the registrar to complete the chain of trust.
Re-check after the change
DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.