---
title: CSA says 100%
url: https://calvin.my/posts/csa-says-100
published: 2024-06-25
updated: 2026-09-17
category: Etc
tags:
- Security
- csa
- singapore
summary: A CSA Internet Health Lookup Tool scan initially rated the author’s website at 79%, citing missing DNSSEC for the domain and enabled Nginx gzip compression. To address these non-compliances, the author enabled DNSSEC through their DNS provider and submitted the required materials to MyNic, then disabled gzip compression. A follow-up scan achieved full compliance with a 100% score and Hall of Fame recognition.
---

# CSA says 100%

Recently one of my client has a request to benchmark their application against CSA.

CSA refers to the Cyber Security Agency of Singapore, and the tool they developed is called the [Internet Health Lookup Tool](https://www.csa.gov.sg/Tips-Resource/internet-hygiene-portal/internet-health-lookup-tool). It runs a collection of tests and gives a score between 0-100%, where 100% refers to full compliance.

I ran a scan for this website, and initially, I got a score of 79%. I have 2 major NCs.

- There is no DNSSEC enabled for calvin.my
- Nginx allows gzip compression

* * *

I decided to take this as a small challenge and see if I can close all the NCs. I then ran through the steps to enable DNSSEC signing, where I need to generate the necessary certs with my DNS provider and then submit it to MyNic. I also update the Nginx config to turn off gzip compression.

And now we have a 100% score. Woohoo!

![](https://camy-pub.s3.ap-southeast-1.amazonaws.com/092af32f-750f-487d-aa87-6e0b3eca51d5.jpeg)

* * *

And we are in the Hall of Fame too 🥳

![](https://camy-pub.s3.ap-southeast-1.amazonaws.com/cb2d202c-da51-493c-976d-b32cdcce485d.jpeg)