# DNSSEC & Cloudfare websites

**URL:** <https://discourse.pi-hole.net/t/dnssec-cloudfare-websites/1518>\
**Category:** Help\
**Created:** [January 29, 2017, 6:52pm UTC](https://discourse.pi-hole.net/t/dnssec-cloudfare-websites/1518 "2017-01-29T18:52:09Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![jpgpi250](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jpgpi250/32/286_2.png) [@jpgpi250](https://discourse.pi-hole.net/u/jpgpi250)\
**Post date:** [February 1, 2017, 1:53pm UTC](https://discourse.pi-hole.net/t/dnssec-cloudfare-websites/1518/3 "2017-02-01T13:53:32Z")

</div>

If you are running raspian jessie lite and upgraded dnsmasq, as explained [here](https://discourse.pi-hole.net/t/running-dnscrypt-and-dnssec/1463/7), you may still get a lot of INSECURE and some BOGUS or ABANDONED validation results. I know I do. I've already raised this [here](https://discourse.pi-hole.net/t/some-remarks-requests-regarding-v2-12/1508/12), but I'm not getting any response, therefore, I continued to investigate.  
I found a discussion on a dutch forum, discussing the problems with DNSSEC and read about a great [site](http://dnsviz.net/) that not only validates DNSSEC, but also shows a lot of detailed information.  
I'm also using this [site](http://www.dnssec-failed.org/) (the page should NOT load if DNSSEC is working), this [site](http://dnssec-debugger.verisignlabs.com/), and of course this [site](https://dnssec.vs.uni-due.de/) (from the pi-hole settings page).

---

_[View the full topic](https://discourse.pi-hole.net/t/dnssec-cloudfare-websites/1518)._