DNSSEC Validation API — DNS Security Extension Check

Description

Verify whether a domain has DNSSEC enabled and properly configured. Check for DS records, DNSKEY records, RRSIG signatures, and validate the chain of trust from the root.

Use Cases

Verify DNSSEC is properly configured
Detect broken DNSSEC chains causing resolution failures
Audit domain security posture
Compliance checking for security standards

Parameters

Name	Type	Required	Description
`domain`	string	Yes	Domain name to validate
`format`	string	No	Response format: json or markdown

Example Request

bash

curl -H 'X-API-Key: YOUR_KEY' \
  'https://api.example.com/dns/dnssec?domain=example.com'

python

import httpx

resp = httpx.get(
    "https://api.example.com/dns/dnssec?domain=example.com",
    headers={"X-API-Key": "YOUR_KEY"},
)
print(resp.json())

javascript

const resp = await fetch("https://api.example.com/dns/dnssec?domain=example.com", {
  headers: { "X-API-Key": "YOUR_KEY" },
});
const data = await resp.json();
console.log(data);

Example Response

json

{
  "domain": "example.com",
  "dnssec_enabled": true,
  "valid": true,
  "ds_records": [{"algorithm": 13, "digest_type": 2}],
  "dnskey_records": 2
}

DNSSEC Validation

Description

Use Cases

Parameters

Related Articles

What Are DNSSEC Records and How to Verify Them

Related Tools in Security

DNS Health Audit

SSL/TLS Certificate Inspector

Zone Transfer Test

Typosquatting Detector