Skip to content
MX and DNS result code

Invalid DNSSEC signature chain

dns.dnssec_bogus

What does this finding mean?

Validating resolvers may reject the zone as invalid.

What is the next step?

Synchronise DS, DNSKEY, signatures and expiration times.

Please note: The result code describes a technical measurement, not a guarantee of delivery, security or legal compliance.

Content reviewed on 20.08.2026.