Test your DNS resolver for DNSSEC Suitability

The thoughtful people over at DNS-OARC are hosting a server that enables you to test the suitability of your resolver for the DNSSEC switchover, which is already underway.

The short version is, issue the command:

dig +short rs.dns-oarc.net txt

and check whether EDNS is used and that your reply is 4,000 bytes or over in size.

Arrow