DNSKEY presence

DNSKEY presence indicates whether DNSKEY records are visible for the relevant zone where .auDO checks them.

DNSSEC posturePublic evidenceObserved over time

Observed evidence

Observed by .auDO

These fields describe the public evidence .auDO records for this signal where available.

dnskey_presentdns_raw.dnskey_presentdnssec_mismatch

Interpretation

How to read this signal

This signal is useful as public evidence of visible posture or change, not as a conclusion on its own.

Why it matters

DNSKEY evidence can indicate DNSSEC material published at the zone. It is useful when compared with RDAP-side DNSSEC evidence and other DNSSEC observations.

What change may indicate

DNSKEY presence may change because of DNSSEC rollout, key rotation, provider migration, delegation change, collection fallback or operational maintenance.

Limits

What it cannot tell us

DNSKEY presence needs to be interpreted with DS records and resolver evidence. Presence alone does not prove the chain is valid, operationally healthy, safe or free from risk.

Observations are descriptive records, not risk scores, allegations or evidence of compromise.

Observed patterns

Common observations

DNSKEY presence changeDNSSEC assertion gap change

Report surface

Where it appears

This signal can appear in daily reports, the observation panel, methodology notes, derived report artefacts and preserved raw snapshot evidence when the relevant fields are present.

Use alongside

Explore this signal in context

This signal is most useful when read alongside related State views, explainers, reports and methodology notes.