SecSpider

SecSpider the DNSSEC Monitoring Project

Check out our blog

To add a zone for monitoring, please submit below:

Vouch for or against a zone's production status

For more information, questions, or comments please contact:
Eric Osterweil (eoster@cs.ucla.edu)
Michael Ryan (michaelj@seas.ucla.edu)
Dan Massey (massey@cs.colostate.edu)

Search for zone:

Deployment status as of: Mon May 5 05:27:06 2008 UTC

Monitoring Summary:

11951

Zones

11368

Zones have NS sets that match their parents' delegation set

10435

DNSSEC enabled zones

957	Zones use both KSKs and ZSKs

902

Production DNSSEC-enabled zones

Distribution of key algorithms in use:

Algorithm	# Keys
RSA/MD5 [RSAMD5]	7
Diffie-Hellman [DH]	0
DSA/SHA-1 [DSA]	2
Elliptic Curve [ECC]	0
RSA/SHA-1 [RSASHA1]	7103
Indirect [INDIRECT]	0
Private [PRIVATEDNS]	0
Private [PRIVATEOID]	0
Reserved 0	0
Reserved 255	0

Production DNSSEC-enabled Zones: (in DNS canonical order):
"8.4.e164.arpa." through "15.0.193.i...addr.arpa."
"18.0.193.i...addr.arpa." through "11.6.199.i...addr.arpa."
"12.6.199.i...addr.arpa." through "111.27.216...addr.arpa."
"96.27.216....addr.arpa." through "181.111.89...addr.arpa."
"182.111.89...addr.arpa." through "e.8.1.c.8.....ip6.arpa."
"asclepion.at." through "digsys.l.bg."
"digsys.m.bg." through "mensura.eng.br."
"poli75.eng.br." through "switch.ch."
"hofmann-asia.cn." through "jenoptik-l...splay.com."
"jenoptik-s...laser.com." through "sirs-finder.com."
"sirs-lab.com." through "brillantbild.de."
"brillantfoto.de." through "hochsprung...-musik.de."
"hochsprung...tmusik.de." through "magnifect.de."
"magniforce.de." through "sirs-finder.de."
"sirs-lab.de." through "sirslab.eu."
"zulip.eu." through "openswan.net."
"pixaco.net." through "sirslab.org."
"supracon.org." through "gubnews.ru."
"hotobzor.ru." through "dalafogfriagolv.se."
"dnssec.se." through "pixaco.co.uk."
"asclepion.us." through "dento.us."

Distribution of the number of vulnerable RRsets in zones

Distribution of key lifetimes on DNSKEY RRsets

Islands of trust