DNSSEC

Check the DNSsec status of every website you browse.

DNSSEC Firefox Add-on - Secure Domain Browsing

'DNSSEC' is a Firefox add-on designed to increase security during browsing by verifying the DNSSEC status of visited domains. It indicates whether these domains' zones are appropriately signed with DNSSEC. Although it leverages web services like Cloudflare’s 1.1.1.1 or Google Public DNS for DNS queries, transmitting your browsing history in the process, projections for a custom DNS over HTTPS service in the future promise enhanced privacy.

Download

View on Firefox Browser Add-ons

Add-on stats

By: Antoine POPINEAU

Daily users: 537

-3

Rating: 3.10

(39)

Version: 1.1.1resigned1 (Last updated: 2024-04-25)

Version code: 5729345

Creation date: 2017-11-25

Weekly download count: 8

Firefox on Android: Yes

Risk:

Permissions:

tabs
webRequest
webNavigation
storage
<all_urls>

Size: 25.69K

Full description: See detailed description

Ranking

# 4,440 ▼ 19

Other rankings

#97 in status keyword 23 ▲ 1 #114 in query keyword 6 ▼ 1 #139 in browsing keyword 28 ▼ 2 #150 in performance keyword 11 ▲ 1

Other platforms

Not available on Chrome

Not available on Android

Not available on Edge

User reviews

These summaries are automatically generated weekly using AI based on recent user reviews. Firefox Browser Add-ons does not verify user reviews, so some user reviews may be inaccurate, spammy, or outdated.

Pros

Works well for DNSSEC validation
Simple user interface
No extra steps to install
Helpful for enhancing security against DNS manipulation
Positive feedback indicating improvement over time

Cons

Limited to only Cloudflare and Google as DNS resolvers
Inaccurate results reported by users
Privacy concerns due to reliance on external resolvers
Cannot verify local domains properly
Some users experienced complete failure of the add-on functionality

Most mentioned

Inability to choose custom DNS resolver
Inaccurate DNSSEC validation results
Preference for local resolver usage
Security concerns regarding reliance on specific providers
Request for additional features like DANE pinned certificate verification

User reviews

While cloudflare.com/ssl/encrypted-sni/#results tells me that "DNSSEC. Attackers cannot trick you into visiting a fake website by manipulating DNS responses for domains that are outside their control," this extension claims that "cloudflare.com not secure by DNSSEC. Domain www.cloudflare.com is not secure through DNSSEC. Your connection is prone to man-in-the-middle attacks."

by Korwin, 2024-08-18

Results inaccurate when choosing Cloudflare as the resolver, but can be worked around by choosing Google as the resolver. No option for custom resolver or even native recursive resolution.

by Wolfizen, 2024-06-11

Can hopefully be made even better with https://bugzilla.mozilla.org/show_bug.cgi?id=1852752

by Firefox user 18361289, 2024-04-06

View all user reviews

Add-on safety

Risk impact

DNSSEC requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.

Risk impact analysis details

Critical Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
Critical ****** ****** ** *** ********* ****** * *********** ******** **** ** ** *** ******* *** ****** **** **** *** ******* *****
High ****** ********* ** * ****** ******** ******** ********** * ******* ******* *****
Low ******* ****** ** *** ********* ********

Risk likelihood

DNSSEC has earned a fairly good reputation and likely can be trusted.

Risk likelihood analysis details

High This extension has low user count. Unpopular extensions may not be stable or safe.
Low **** ********* *** ******* **** **** * ****** **** ***** ******** *** **** ****** ** ** ****** *** *****
Low **** ********* *** ***** **** **** * ****** **** ***** ********** *** **** ****** ** ** ****** *** *****
Good **** ********* *** **** **** *******

Upgrade to see full risk analysis details