DNSSEC

What it checks

Whether answers about the domain validate with DNSSEC.

Why it matters

Without DNSSEC, a resolver can be fed false answers that send visitors elsewhere.

How to fix it

1. Turn on DNSSEC at your DNS host.
2. Add the DS record it gives you at your registrar; where one company is both, it is often one switch.