peerglass_dns_dnssec
Read-onlyIdempotent
Validate DNSSEC chain-of-trust for domains by checking DNSKEY, DS, and RRSIG records to determine security status as SECURE, INSECURE, BOGUS, or INDETERMINATE.
Instructions
Validate the DNSSEC chain-of-trust for a domain. Checks DNSKEY, DS, and RRSIG records and reports SECURE / INSECURE / BOGUS / INDETERMINATE.
BOGUS status means signatures exist but fail validation — a serious indicator of misconfiguration or potential tampering.
Args: params (DNSSECInput): - domain (str): Domain name (e.g. 'cloudflare.com') - response_format (str): 'markdown' (default) or 'json'
Returns: str: DNSSEC status, chain validity, record counts, and signing algorithms.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| params | Yes |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |