Fix a DNSSEC validation failure
dnssec-invalid
Your zone is signed but validation fails, so validating resolvers refuse every answer and your domain disappears for those users entirely.
Why this matters
DNSSEC is configured but validation fails. Resolvers that enforce DNSSEC will reject lookups entirely, making your site unreachable for some users.
CDN and edge
Cloudflare
- 1 Verify the DS record at your registrar matches what Cloudflare shows
- 2 If recently migrated, remove old DS records and re-enable DNSSEC
- 3 Use dnsviz.net to diagnose the specific validation failure
Does your app still have this?
Scan your domain