DNSViz

Select the DNSSEC algorithms that should be considered in the analysis. Selecting no algorithms is equivalent to evaluating a zone as if unsigned.

Select the DS digest algorithms that should be considered in the analysis.

Show published DNSKEYs in addition to active DNSKEYs, which are being used to sign records.

Use KSKs from the following zones as trust anchors for the DNSSEC analysis: the root zone; and/or the KSK for ISC's DNSSEC-lookaside validation (DLV) service.

Use the following DNSKEY(s) as trust anchors for the DNSSEC analysis. DNSKEYs should be entered one per line, the same format as would go in BIND's named.conf trusted-keys format.