my.nextdns.io | DNSViz

my.nextdns.io

Updated: 2023-04-06 09:49:05 UTC (410 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Insecure (4)

cname.vercel-dns.com/A
cname.vercel-dns.com/A
cname.vercel-dns.com/A
cname.vercel-dns.com/A

Secure (3)

com/SOA
com/SOA
my.nextdns.io/CNAME

DNSKEY/DS/NSEC status

Secure (14)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 60955)
./DNSKEY (alg 8, id 951)
NSEC3 proving non-existence of vercel-dns.com/DS
com/DNSKEY (alg 8, id 30909)
com/DNSKEY (alg 8, id 36739)
com/DS (alg 8, id 30909)
io/DNSKEY (alg 8, id 43428)
io/DNSKEY (alg 8, id 47451)
io/DNSKEY (alg 8, id 57355)
io/DS (alg 8, id 57355)
nextdns.io/DNSKEY (alg 13, id 2371)
nextdns.io/DNSKEY (alg 13, id 34505)
nextdns.io/DS (alg 13, id 2371)

Delegation status

Insecure (1)

com to vercel-dns.com

Secure (3)

. to com
. to io
io to nextdns.io

Notices

Errors (1)

io zone: The server(s) were not responsive to queries over UDP. (2a01:8840:9f::17)

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

See also

DNSSEC Debugger by Verisign Labs.

Download: png | svg

Warning

JavaScript is required to make the graph below interactive.

DNSSEC authentication graph