ANSSI Reco-DNS §3.1
TTL adaptés à la criticité du domaine
UnveilScan findings mapped to this control
The scanner emits 2 distinct findings on this control. Click "Scan a domain" below to see which of them currently apply to your site, with copy-paste remediation snippets (nginx, Apache, DNS BIND, web-server config).
dns.ns_ttl_too_long
⏱ 15 min
DNS — Ns ttl too long
Risk if ignored: Low impact, mostly a maturity signal. Fix when you next touch this area.
operational
dns.ns_ttl_too_short
⏱ 15 min
DNS — Ns ttl too short
Risk if ignored: Low impact, mostly a maturity signal. Fix when you next touch this area.
operational