Did all the good DANE TLSA record checkers all go away? All the ones I can find are caching results, either the report, or the DNS queries, so they are near useless for fixing/debugging your records.
Conversation
Replying to
internet.nl should work properly without caching being an issue and tests a lot more DANE. It's really good.
Replying to
Thanks.
Their results are a little bit critical though. Just because my secondary doesn't have IPv6 it says: Too bad! Your website is not reachable for visitors using a modern internet address (IPv6), or improvement is possible.
Same with HTTPS.
2
Replying to
It is annoying that it checks IPv6 if you strictly want a security checking tool but it's meant for checking for adoption of modern / good practices in general. It like that it's pretty thorough with checking DNS, etc.
2
1
Show replies
See also:
- dane.sys4.de
- huque.com/bin/danecheck
- stats.dnssec-tools.org/explore/?inter (cached results)