Skip to end of metadata
Go to start of metadata

Solution

Extended DNSSEC Validator

Extended DNSSEC Validator is an add-on for the Mozilla Firefox 4 beta web browser, which allows you to check the existence and validity of DNSSEC signed DNS records for domains. If a valid DNSSEC chain to the domain has been found, it checks for the existence of TXT or TLSA records that can store a copy of the hash of the HTTPS certificate. The results are shown in the address bar using the same scheme that Firefox already employs (identity box). This allows owners of DNSSEC enabled domains to securely deploy self-signed certificates or provide additional trust in their CA-signed certificates.

https://os3sec.org/


DNSSEC-Validator


A plugin for Firefox that is checking the AD bit in a DNS answer coming from an validating DNS resolver (such as BIND, Windows 2008R2 DNS or Unbound) is developed by Czech TLD registry (CZ.NIC) and can be found at
http://www.dnssec-validator.cz/