A signed record set has a TTL of less than a minute.

TTL_SHORT · Severity: Info

• InfoTTL_SHORT

  A signed record set has a TTL of less than a minute.

  The TTL comes from the record's DNSSEC signature, so it is the value set in the zone. With less than 60 seconds, resolvers ask again almost every time, which adds latency and load; some resolvers raise very low TTLs anyway. Short TTLs are useful during a planned change or for failover.

Reported by

• DNS TTL check

Available through the API

• DNS TTL check API

Related findings

• Info TTL_LONG A record set has a TTL of more than a week.
• Info TTL_NS_SHORT The signed NS records have a TTL of less than an hour.

All findings