DNSSEC-Tools being migrated -- expect broken links.
The process to convert older wiki pages to our new site is not yet complete; please be patient while we work through the moving process. -- 2018-08-11

Your DNS resolution is insecure

So you told me, but why?

Because the bumper image is loaded from a domain name which is insecure. It has dnssec data for the A record for the web server, but the A record actually contains a bad signature. A browser that was properly protected, either within the browser itself or because your site's recursive validating resolver was secured, would prevent you from retrieving this image since the zone date for the web server was known to be bad. For a list of our test records, see our Test Zone page.

What would it look like if I was secure?

Here's a screen shot from a secured version of firefox looking at the same page:

The firefox extension bundled with dnssec-tools enables you to see how many links were untrusted after DNSSEC processing: