Probes a domain via DNS-over-HTTPS (Cloudflare 1.1.1.1) for DS, DNSKEY, and RRSIG records. Reports algorithm IDs per RFC 8624 — all current DNSSEC algos are quantum-vulnerable. Flags rollover cadence and chain-of-trust gaps. Pairs with the DNS / Email Auth Audit and PQC Analyzer.
Lookups via Cloudflare DoH (https://cloudflare-dns.com/dns-query). No keys, no logs on our side.