• caglararli@hotmail.com
  • 05386281520

Resources to easily check DNSSEC in Web communications – any web extentions in EU / NA?

Çağlar Arlı      -    2 Views

Resources to easily check DNSSEC in Web communications – any web extentions in EU / NA?

My question relates to DNSSEC and how to check it easily when navigating the web.

DNSSEC is used by a majority of TLDs and CC TLDs, and it contributes to secure the DNS protocol.

Statistics about TLDs' usage of DNSSEC (09-2024) https://ithi.research.icann.org/graph-m7.html

ICANN's article : "DNSSEC – What Is It and Why Is It Important?" https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en

It is used to different extent according to countries and types of organizations.

DNSSEC Validation Rate by country (%)source: APNIC): https://stats.labs.apnic.net/dnssec

From an end-user perspective, being able to check DNSSEC while accessing websites that are using this technology (eg. public organizations / administrations, online banking, email providers) would be therefore beneficial. Yet, it doesn't seem easy to do.

I am thinking of some web extensions that enabled this check to be performed easily for the web. Some of those extensions doing this task have been removed from extension stores, one doesn't seem to work properly (eg. reliable websites show valid DNSSEC records when checked with dig while that web extension states it would be NOK) ; as for Chrome-type browsers, there is one web extension but it makes network connections to a remote place in Central Asia, which I don't wish as I am mostly browsing on websites that are based in the EU or North America.

Would anyone have solutions or ideas to share please on that topic ?

Many thanks,