SecSpider the DNSSEC Monitoring Project
Home | Blog | About | FAQ | Documentation | Usage | Pollers | GPG Key | IRL
Check out our blog

To add a zone for monitoring, please submit below:

Vouch for or against a zone's production status

For more information, questions, or comments please contact:
Eric Osterweil (eoster@cs.ucla.edu)
Michael Ryan (michaelj@seas.ucla.edu)
Dan Massey (massey@cs.colostate.edu)

Search for zone:

Deployment status as of: Mon May 5 05:27:06 2008 UTC

Monitoring Summary:

11951 Zones
11368 Zones have NS sets that match their parents' delegation set
10435 DNSSEC enabled zones
957 Zones use both KSKs and ZSKs
902 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
RSA/MD5 [RSAMD5]7
Diffie-Hellman [DH]0
DSA/SHA-1 [DSA]2
Elliptic Curve [ECC]0
RSA/SHA-1 [RSASHA1]7103
Indirect [INDIRECT]0
Private [PRIVATEDNS]0
Private [PRIVATEOID]0
Reserved 00
Reserved 2550
Production DNSSEC-enabled Zones: (in DNS canonical order):
"8.4.e164.arpa." through "15.0.193.i...addr.arpa."
"18.0.193.i...addr.arpa." through "11.6.199.i...addr.arpa."
"12.6.199.i...addr.arpa." through "111.27.216...addr.arpa."
"96.27.216....addr.arpa." through "181.111.89...addr.arpa."
"182.111.89...addr.arpa." through "e.8.1.c.8.....ip6.arpa."
"asclepion.at." through "digsys.l.bg."
"digsys.m.bg." through "mensura.eng.br."
"poli75.eng.br." through "switch.ch."
"hofmann-asia.cn." through "jenoptik-l...splay.com."
"jenoptik-s...laser.com." through "sirs-finder.com."
"sirs-lab.com." through "brillantbild.de."
"brillantfoto.de." through "hochsprung...-musik.de."
"hochsprung...tmusik.de." through "magnifect.de."
"magniforce.de." through "sirs-finder.de."
"sirs-lab.de." through "sirslab.eu."
"zulip.eu." through "openswan.net."
"pixaco.net." through "sirslab.org."
"supracon.org." through "gubnews.ru."
"hotobzor.ru." through "dalafogfriagolv.se."
"dnssec.se." through "pixaco.co.uk."
"asclepion.us." through "dento.us."
All Monitored Zones: (in DNS canonical order):
"." through "digsys.1.bg."
"digsys.2.bg." through "www.meta-i.com."
"mhmackenzie.com." through "vbi-thueringen.de."
"verwandtsc...tstest.de." through "globulus.nl."
"goochelaar...anitas.nl." through "sigexpired...etlabs.nl."
"bogussig.s...etlabs.nl." through "ok.signoti...etlabs.nl."
"sigexpired...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "nods.signo...etlabs.nl."
"bogussig.n...etlabs.nl." through "bogussig.o...etlabs.nl."
"nods.ok.no...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "unknownalg...etlabs.nl."
"unknownalg...etlabs.nl." through "bogussig.b...etlabs.nl."
"nods.bogus...etlabs.nl." through "nods.nods....etlabs.nl."
"ok.nods.ok...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "signotince...etlabs.nl."
"bogussig.s...etlabs.nl." through "ok.unknown...etlabs.nl."
"sigexpired...etlabs.nl." through "ok.bogussi...etlabs.nl."
"sigexpired...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "bogussig.s...etlabs.nl."
"nods.sigex...etlabs.nl." through "ok.signoti...etlabs.nl."
"sigexpired...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "unknownalg...etlabs.nl."
"nods.nods....etlabs.nl." through "nods.ok.si...etlabs.nl."
"ok.ok.sign...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "unknownalg...etlabs.nl."
"unknownalg...etlabs.nl." through "bogussig.o...etlabs.nl."
"bogussig.b...etlabs.nl." through "ok.nods.un...etlabs.nl."
"sigexpired...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "jot23.org."
"klubkev.org." through "mediumzone...ec.nic.uk."
"smallzone....ec.nic.uk." through "yahoo."

Distribution of the number of vulnerable RRsets in zones

Distribution of key lifetimes on DNSKEY RRsets

Islands of trust