Test is not running.
servfail.fr is my personal DNSSEC sandbox.
The DNS zone is signed using my own hidden primary, then transferred to some of my own servers. If you can see this page, and the test above says that your DNS resolver validates DNSSEC, then it means that I haven’t made any mistakes.
The test is inspired by dnssec-or-not.com, but I wanted to try making a testing tool of my own.
If you own a domain name, you can use a tool such as Zonemaster to find out if it is signed.
The test uses a subdomain that should always work, a subdomain with incorrect DNSSEC signatures that should not resolve on validating resolvers, and DNS4EU as a known validating resolver for cross-checking a “not validating” verdict. If your resolver validates, no query to DNS4EU is sent out.