{"slug":"netintel-dev-dnssec-validate-d2bf7d","title":"Validate a domain's DNSSEC configuration over DNS-over-HTTPS","host":"netintel.dev","method":"GET","resource":"https://netintel.dev/dnssec/validate","category":"other","description":"Validate a domain's DNSSEC configuration over DNS-over-HTTPS: DS records at the parent zone, DNSKEY records at the domain, RRSIG signatures, NSEC/NSEC3, plus the validating resolver's AD bit — returns a full chain-of-trust assessment and readiness score so agents can verify DNS integrity before trus","price_listed":0.03,"price_asked":0.03,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":912,"reported_calls_30d":2,"reported_payers_30d":1,"networks":["eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"method":"GET","queryParams":{"domain":"example.com"},"type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"domain":{"description":"Domain name to validate DNSSEC for (e.g. example.com)","type":"string"}},"required":["domain"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"properties":{"chain_of_trust":{"type":"string"},"components":{"type":"object"},"dnssec_enabled":{"type":"boolean"},"domain":{"type":"string"},"findings":{"type":"array"},"grade":{"type":"string"},"resolver_validated":{"description":"Validating resolver's AD bit — chain verified upstream","type":"boolean"},"score":{"type":"number"},"tld_ds_present":{"type":"boolean"}},"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-09-24","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.03,"price_match":true,"latency_ms":912,"error":null}],"description_full":"Validate a domain's DNSSEC configuration over DNS-over-HTTPS: DS records at the parent zone, DNSKEY records at the domain, RRSIG signatures, NSEC/NSEC3, plus the validating resolver's AD bit — returns a full chain-of-trust assessment and readiness score so agents can verify DNS integrity before trusting resolution results.","last_updated":"2026-09-10T01:02:06.873Z","schemes":["exact"]}