Verisign Labs
Verisign Labs

We are committed to making the internet a safe and reliable place for people to do business and interact.

USING INTERNET SECURITY TOOLS TO CREATE A STRONGER WEB

The Verisign Labs team creates and tests tools to improve the internet. Select and use a host of free DNS tools developed by one of the most trusted names in internet security.

DNSSEC DEBUGGER

The DNSSEC Debugger is a web-based tool for ensuring that the "chain of trust" is intact for a particular DNSSEC-enabled domain name. The tool shows a step-by-step validation of a given domain name and highlights any problems found.

View tool

DNSSEC KEY SIZE

The DNSSEC Key Size tool tests your network's ability to resolve domain names that have been signed with "large" DNSSEC keys. The tool was developed to assist with two changes to the DNS root zone: an increase in the size of the root zone Zone Signing Key (ZSK) in 2016, and a rollover of the root zone Key Signing Key (KSK) in 2018. Although these changes to the root zone are now complete, the tool is useful for testing large DNSSEC responses from the root or other zones.

View tool

DNSSEC SCOREBOARD

The DNSSEC Scoreboard shows the number of domains secured in the .com and .net zones.

View tool

DNSViz

DNSViz is a tool for visualizing the status of a DNS zone. It was designed as a resource for understanding and troubleshooting deployment of DNSSEC. It provides a visual analysis of the DNSSEC authentication chain for a domain name and its resolution path in the DNS namespace, and it lists configuration errors detected by the tool. Watch this webinar to learn more about DNSViz and how it might be used to improve your DNS experience.

View tool

KEYTOOL

Keytool is a simple web form designed to assist with manipulation of DNSKEY data. It can reformat DNS key records and generate DS records and lines suitable for pasting into a named.conf file.

View tool

YET ANOTHER ZONE VALIDATION SCRIPT

YAZVS is a Perl script designed to perform DNSSEC validations on candidate signed zones before they are published. It verifies signatures and reports on differences between the current and candidate zones. Due to its implementation, this script is not suitable for very large zones.

View tool