DNSSEC Validation

bkn.go.id

Not DNSSEC-signed

This zone publishes no DS record, so resolvers can’t cryptographically verify its answers. Records could be spoofed via cache poisoning.