methodology / Security & Infrastructure / #22

DNSSEC validation

live factor #22 · Security & Infrastructure · scoring impl: implemented · weight 1.3%

What we measure

DNSSEC cryptographically signs your DNS records so attackers can't forge them. Without it, your visitors can be redirected to malicious sites via DNS hijacking.

How to improve your score

Enable DNSSEC at your registrar / DNS provider. Cloudflare, Google Domains, and most modern providers support it with one click.

Data source

Data source for this factor is not yet documented.

Implementation notes

Add DS record check to probe stage.

Scoring

Scoring formulas are versioned with the methodology. The current method (v1.1.0) maps raw measurements to pass, warn, fail. Factor weights determine how much each contributes to the composite — see the methodology index for the full table.

Version history

← back to methodology