4

Is there some way to verify that DNSSEC was used by Safari when visiting a web site?

I'm most interested in Safari for Mac OS X. But if there is a way in iOS, that would be important as well.

Improve this question

2 Answers 2

Reset to default
4

DNSSEC is an extension of the DNS infrastructure. Usually a browser is not involved in domain name resolution. So there is no way for Safari to detect DNSSEC directly.

There is an Safari DNSSEC extension though which allows you to check the existence and validity of DNS Security Extensions (DNSSEC) records and Transport Layer Security Association (TLSA) records related to domain names. You can download it for several browsers here: DNSSEC/TLSA Validator

Direct link of the Safari extension:

(this is a shell script which has to be executed in Terminal.app)

Improve this answer
-1

As it seems there is a new method to do this on macos: https://developer.apple.com/videos/play/wwdc2022/10079/

Improve this answer
2
  • 2
    Please don't just give a link but make the answer stand alone without the link. The link is needed for citation and for further details
    – mmmmmm
    Oct 19, 2022 at 11:24
  • Your answer could be improved with additional supporting information. Please edit to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers in the help center.
    – Community Bot
    Oct 19, 2022 at 21:49

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .