Frequently asked questions
Is it really free? Do I need an account?
Yes, free, and no. There is no signup, no login, and no payment. There are no ads and no daily lookup cap. You type a domain or IP and get an answer.
How many resolvers does the propagation checker use?
24 public resolvers worldwide. Rather than only showing a green or red tick per location, the propagation clock reads each resolver's remaining cache TTL and projects when the last one will serve your new value, measured against your domain's own authoritative nameservers.
What data do you keep about me?
The tools require no personal data. We keep minimal security and abuse-prevention logs (IP, user agent, queried host) needed to run the service. The only place an email address is collected is the optional newsletter on the Learning Hub, which you can ignore. Full detail is in the privacy policy.
How is the DNSSEC check different?
Most tools only show whether a DS or DNSKEY record exists. Valla DNS validates the chain: it computes the DS digest from your key and confirms it matches the parent, and cryptographically verifies the signatures. That is what catches a broken chain, the kind that makes a domain SERVFAIL for every validating resolver, which a presence-only check reports as healthy.
How accurate is the SSL grade?
The grade comes from a live TLS handshake we run against the server: certificate validity and chain, the TLS versions and cipher suites it actually accepts (including forward secrecy), HSTS, OCSP, and the full Certificate Transparency history. It follows SSL-Labs-style grading, so a server still allowing TLS 1.0 or a weak cipher is graded accordingly.
Where do the answers come from?
Directly from the source: public resolvers and your authoritative nameservers for DNS, RDAP (with a port-43 fallback) for WHOIS, a live handshake for SSL, and the public BGP table for routing and RPKI. Nothing is scraped or cached from another tool.
Something else?
Read about Valla DNS, browse the Learning Hub guides, or email support@vallahub.com.