You can even use on-line DNSSEC debuggers to hint the total chain of trust from the basis. After enabling DNSSEC and publishing the DS document, confirm the chain of belief is unbroken. Key generation, rotation, and DS record updates at … Continue reading →