A record set has a TTL of more than a week.

TTL_LONG · Severity: Info

• InfoTTL_LONG

  A record set has a TTL of more than a week.

  Resolvers may keep the records for that long, so a change takes a week or more to reach everyone, and many resolvers cap cached TTLs at a week or a day anyway. A TTL read from the resolver's cache is normally a lower bound, so one above a week holds for the zone too. The evidence names the type and the source.

  Recommendation: Lower the TTL to a day or less, unless the records never change.

Reported by

• DNS TTL check

Available through the API

• DNS TTL check API

Related findings

• Info TTL_NS_SHORT The signed NS records have a TTL of less than an hour.
• Info TTL_SHORT A signed record set has a TTL of less than a minute.

All findings