DNSSEC Tools

Tools for testing whether DNSSEC is correctly implemented for your domain:

• DNSSEC Analyzer from Verisign Labs
• DNSViz – A DNS Visualization Tool from Sandia National Laboratories
• Internet.nl – checks whether your domain is using DNSSEC

Tools for using DNSSEC on your local system:

• DNSSEC-Trigger – local DNSSEC resolver for Windows, Mac OS X or Linux
• DNSSEC Validator Add-on for Firefox
• DNSSEC Validator Extension for Google Chrome

To test what will happen if your DNSSEC validation indicator in your browser finds a site where DNSSEC is broken, you can visit either of these sites where DNSSEC has been deliberately mis-configured:

• http://www.rhybar.cz/
• http://www.dnssec-failed.org/

Tools for setting up your own DNS servers:

• OpenDNSSEC project
• DNSSEC-Tools project

Tools for testing your DANE implementation

• NIST’s TLSA test tool
• DANE SMTP Validator

Tools for Web Developers

• DNSSEC Client Check — Tests if website visitors DNSSEC validate

Other DNSSEC Tools Sites

The DNSSEC-Tools project contains a variety of tools relating to various aspects of using DNSSEC. Check out this video from DNSSEC-Tools by Wes Hardaker which provides a good introduction to their tools. Including how to use them for establishing, verifying and troubleshooting your DNSSEC configuration.

Verisign Labs also maintains a tools page listing a variety of DNSSEC-related tools.

You can see the list of all tool resources in the Deploy360 site.