SecSpider the DNSSEC Monitoring Project
Home | Blog | Documentation | Trust-Anchors | Pollers | GPG Key
Check out our BIND formatted Trust Anchors File!
Check out our new sister-project Vantages with libvdns, dnsfunnel, and vantaged!

To add a zone for monitoring, please submit below:

Vouch for or against a zone's production status

For more information, questions, or comments please contact:
Eric Osterweil (eoster@cs.ucla.edu)
Dan Massey (massey@cs.colostate.edu)
Lixia Zhang (lixia@cs.ucla.edu)

Search for zone:
Deployment status as of: Mon Nov 23 10:04:07 2009 UTC

Monitoring Summary:

18828 Zones
16910 Zones have NS sets that match their parents' delegation set
9243 DNSSEC enabled zones
4826 Zones use both KSKs and ZSKs
3706 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
RSA/MD5 [RSAMD5]17
Diffie-Hellman [DH]0
DSA/SHA-1 [DSA]24
Elliptic Curve [ECC]0
RSA/SHA-1 [RSASHA1]16603
Indirect [INDIRECT]0
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]404
Private [PRIVATEDNS]0
Private [PRIVATEOID]0
Reserved 00
Reserved 2550
Unknown Key 62
Unresolved Names0
Production DNSSEC-enabled Zones: (in DNS canonical order):
"lopp.ae." through "16.0.193.i...addr.arpa."
"17.0.193.i...addr.arpa." through "241.93.200...addr.arpa."
"242.93.200...addr.arpa." through "0.f.0.6.a.....ip6.arpa."
"9.0.0.d.a.....ip6.arpa." through "rikostyle.bg."
"rosiza.bg." through "troianet.com.br."
"webtorpedo.com.br." through "tre-pr.jus.br."
"tre-rj.jus.br." through "healthpros.com."
"hellermaschinen.com." through "wisti.com."
"ws6z.com." through "japex-pco.cz."
"japex-security.cz." through "fit.vutbr.cz."
"wallvision.cz." through "katasorb.de."
"katjahensel.de." through "lcs.mit.edu."
"ll.mit.edu." through "liquidfe.mobi."
"n1ics.mobi." through "moranaclan.org."
"motherlode...rotto.org." through "as-companiet.se."
"assistansm...dglans.se." through "gentest.se."
"glassar.se." through "mc-huset.se."
"mc-husetmalmo.se." through "skyddadin.se."
"skyddamin.se." through "xn--ausfel...er-1qb.se."
"xn--bandbr...st-gfb.se." through "klingon-em...ssy.co.za."
All Monitored Zones: (in DNS canonical order):
"." through "146.63.in-addr.arpa."
"11.146.63....addr.arpa." through "hotspot.v.bg."
"imena.v.bg." through "ite.net.br."
"kuroiwa.net.br." through "legalexchange.com."
"leonom.com." through "eudomeny.cz."
"eurodomena.cz." through "jenabioscience.de."
"jenadrugdi...covery.de." through "gps.gov."
"greensuppliers.gov." through "xeyedfrog.net."
"xl2tpd.net." through "ok.signoti...etlabs.nl."
"sigexpired...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "unknownalg...etlabs.nl."
"bogussig.u...etlabs.nl." through "bogussig.o...etlabs.nl."
"nods.ok.si...etlabs.nl." through "ok.unknown...etlabs.nl."
"sigexpired...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "sigexpired...etlabs.nl."
"bogussig.s...etlabs.nl." through "bogussig.s...etlabs.nl."
"nods.sigex...etlabs.nl." through "nods.bogus...etlabs.nl."
"ok.bogussi...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "signotince...etlabs.nl."
"bogussig.s...etlabs.nl." through "nods.nods....etlabs.nl."
"ok.nods.si...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "classless.org."
"comcastbusiness.org." through "cartosat.ru."
"cav.ru." through "ska4ay.ru."
"skidky.ru." through "edsbyn.se."
"eductor.se." through "mirk.se."
"mironfoods.se." through "tipsat.se."
"tittatv.se." through "zw."

Distribution of the number of vulnerable RRsets in zones

Distribution of key lifetimes on DNSKEY RRsets

Production Islands of trust