design.google
🔒 Signed & validating
This domain is signed and a validating resolver confirms the chain of trust (AD flag set).
- DNSKEY
- 2 key(s)
- Algorithm
- 8 · RSASHA256
- DS in parent
- 1 record(s)
- AD flag
- set ✓
Checked 26 Oct 2026 by our weekly check.
What this means for design.google
Answers for design.google carry signatures, and the parent zone vouches for its key with a DS record. A validating resolver rejects forged answers for this name instead of passing them on. Read how the AD flag and the DS record fit together.
More: Google (.google)
Full list: Brand extension sites →