Free tools
Queries the authentication flag (AD) returned by Google and Cloudflare's public resolvers when resolving a domain, to know whether the answer arrived validated via DNSSEC.
The "Authenticated Data" flag is added by the resolver when it could validate the domain's DNSSEC signature chain. If both resolvers confirm it, the signature is consistent.
DNSSEC protects the integrity of DNS answers, not web traffic. A domain can have correct HTTPS without DNSSEC, and vice versa.
Frequently asked questions
No; we read the result already validated by Google and Cloudflare's public resolvers, comparing both answers.
That is an inconsistency signal worth reviewing with your DNS provider.