A DS (Delegation Signer) record lives in the parent zone and holds a digest of the child zone's key-signing DNSKEY. This check shows each DS record's key tag, algorithm, digest type and digest, so you can confirm the parent points at the key your zone actually publishes.
See it in Action
To add or update DS records, configure them in your DNS zone file and then update your parent zone with the new DS records.
A DS record links to a DNSKEY record in the parent zone, providing a hash of the DNSKEY for verification. The DNSKEY record contains the actual public key used for DNSSEC.
Use the DS Records Lookup tool to compare the key tag and digest values with those in your DNSKEY record to ensure they match.
Mismatched DS records can lead to DNSSEC validation failures, potentially causing issues with DNS resolution and domain security.
Yes, the tool works regardless of your DNS provider, as long as the domain has DS records configured in the DNS zone.
Regularly check DS records, especially after making changes to DNSKEYs or DNSSEC configurations, to ensure continued validity.
Yes, consult DNSSEC documentation, RFC 4034, and RFC 4035 for detailed information on DS record formats and DNSSEC specifications.
While the tool helps verify DS records, for deployment issues, review your DNSSEC configuration and consult additional resources or support.
The tool complements other DNS security tools by providing specific verification for DS records, helping ensure overall DNSSEC integrity.
Double-check your DNSSEC configuration, ensure DS records are properly propagated, and consult with your DNS provider for further assistance.
Emails Analyzed
0DMARC Reports Processed
0Sending Sources Checked
0Domains Scanned
0
‘yourDMARC secures emails, saves our time. Our small healthcare practice struggled with email security. yourDMARC's DMARC/DKIM combo and real-time alerts are a lifesaver! HIPAA compliance is a breeze now, and their support team is top-notch. ‘
“yourDMARC responds quickly to the needs of our business. I've worked with many companies and what is most impressive and unique about yourDMARC is their ability to act as a true partner with aligned interests and not just one party to a transitional relationship. ”
Nick Kitchin CEO at Cumulus Energy Storage
Discover more about yourDMARC and quickly book a demo with our sales representatives.
Explore our flexible plans and pricing to find the perfect email security solution for your business today.
Explore our latest blogs for expert insights on spoofing prevention and email compliance best practices.
© 2026 yourDMARC
Download to read the eBook
