github.com · DNS
DNSSEC is off
Answers about the domain can't be checked, so a resolver can be fed false ones.
- Turn on DNSSEC at your DNS host.
- Add the DS record it gives you at your registrar; where one company is both, it is often one switch.
What it checks
Whether answers about the domain validate with DNSSEC.
Why it matters
Without DNSSEC, a resolver can be fed false answers that send visitors elsewhere.