Andrew Latham
  1. Name servers have glue records[a] setup via the registrar
  2. Base (apex) domain (@) and www point to the same IP(s)
  3. mail.example.com, nameservers.example.com return all the mail and name servers respectively
  4. SOA[b] email address works and is read by a human daily
  5. Name servers are on more than one subnet
  6. SOA serial is not date based
  7. Wildcard and or Generated answers for undefined PTR[c] records
  8. Registrar offers API to update glue records for mitigating DDOS[d]
  9. Documentation is easy to find
  10. Disaster recovery is tested on a schedule
a. https://en.wikipedia.org/wiki/Domain_Name_System#Circular_dependencies_and_glue_records
b. Start of Authority
c. https://en.wikipedia.org/wiki/Reverse_DNS_lookup
d. distributed denial-of-service attack