# Lets Encrypt and DNSSEC verification

**URL:** https://community.letsencrypt.org/t/lets-encrypt-and-dnssec-verification/213809
**Category:** Issuance Tech
**Created:** [February 23, 2024, 3:56pm UTC](https://community.letsencrypt.org/t/lets-encrypt-and-dnssec-verification/213809 "2024-02-23T15:56:23Z")
**Posts on this page:** 1
**Showing post:** 5

<div class="post-metadata">

### Author: ![mcpherrinm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mcpherrinm/32/59604_2.png) [@mcpherrinm](https://community.letsencrypt.org/u/mcpherrinm)
#### Post date: [February 23, 2024, 5:28pm UTC](https://community.letsencrypt.org/t/lets-encrypt-and-dnssec-verification/213809/5 "2024-02-23T17:28:24Z")

</div>

Let’s Encrypt always verifies DNSSEC. There are some cases CAs are permitted to not, but it is simpler for us and everyone to just always validate. We do not require domains to be DNSSEC signed.

---

_[View the full topic](https://community.letsencrypt.org/t/lets-encrypt-and-dnssec-verification/213809)._