3 ms·
The browser doesn't need to do anything. The resolver will simply not pass an unsigned or incorrectly signed record from a signed zone. You can test yours here[
by spindritf 12y ago
The browser doesn't need to do anything. The resolver will simply not pass an unsigned or incorrectly signed record from a signed zone. You can test yours here[1]. Google DNS[2] supports DNSSEC.
Were you thinking about DANE?
[1] http://dnssec.vs.uni-due.de/ http://dnssec.vs.uni-due.de/
[2] https://developers.google.com/speed/public-dns/ https://developers.google.com/speed/public-dns/