DNSKEY presence
DNSKEY presence indicates whether DNSKEY records are visible for the relevant zone where .auDO checks them.
Observed evidence
Observed by .auDO
These fields describe the public evidence .auDO records for this signal where available.
Interpretation
How to read this signal
This signal is useful as public evidence of visible posture or change, not as a conclusion on its own.
Why it matters
DNSKEY evidence can indicate DNSSEC material published at the zone. It is useful when compared with RDAP-side DNSSEC evidence and other DNSSEC observations.
What change may indicate
DNSKEY presence may change because of DNSSEC rollout, key rotation, provider migration, delegation change, collection fallback or operational maintenance.
Limits
What it cannot tell us
DNSKEY presence needs to be interpreted with DS records and resolver evidence. Presence alone does not prove the chain is valid, operationally healthy, safe or free from risk.
Observations are descriptive records, not risk scores, allegations or evidence of compromise.
Observed patterns
Common observations
Report surface
Where it appears
This signal can appear in daily reports, the observation panel, methodology notes, derived report artefacts and preserved raw snapshot evidence when the relevant fields are present.
Nearby signals
Related signals
Use alongside
Explore this signal in context
This signal is most useful when read alongside related State views, explainers, reports and methodology notes.