SecSpider the DNSSEC Monitoring Project
Home | Blog | Documentation | Trust-Anchors | Pollers | GPG Key
Check out our BIND formatted Trust Anchors File!
Check out our new sister-project Vantages with libvdns, dnsfunnel, and vantaged!

To add a zone for monitoring, please submit below:

Vouch for or against a zone's production status

For more information, questions, or comments please contact:
Eric Osterweil (eoster@cs.ucla.edu)
Dan Massey (massey@cs.colostate.edu)
Lixia Zhang (lixia@cs.ucla.edu)

Search for zone:
Deployment status as of: Sun Nov 22 06:46:27 2009 UTC

Monitoring Summary:

18817 Zones
16922 Zones have NS sets that match their parents' delegation set
9282 DNSSEC enabled zones
4852 Zones use both KSKs and ZSKs
3742 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
RSA/MD5 [RSAMD5]33
Diffie-Hellman [DH]0
DSA/SHA-1 [DSA]24
Elliptic Curve [ECC]0
RSA/SHA-1 [RSASHA1]16694
Indirect [INDIRECT]0
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]397
Private [PRIVATEDNS]0
Private [PRIVATEOID]0
Reserved 00
Reserved 2550
Unknown Key 62
Unresolved Names0
Production DNSSEC-enabled Zones: (in DNS canonical order):
"lopp.ae." through "18.0.193.i...addr.arpa."
"19.0.193.i...addr.arpa." through "141.41.202...addr.arpa."
"142.41.202...addr.arpa." through "5.1.1.0.0.....ip6.arpa."
"6.6.0.c.5.....ip6.arpa." through "digsys.t.bg."
"technoexpert.bg." through "kobayashi.eti.br."
"leonardoas.eti.br." through "trf4.jus.br."
"trf5.jus.br." through "immunarraytor.com."
"indivisibi...ities.com." through "zecourrier.com."
"zeissmeditec.com." through "lidovky.cz."
"linxcz.cz." through "xtld.cz."
"ywa.cz." through "klingon-embassy.de."
"knipp.de." through "blueforte.eu."
"camerashots.eu." through "asclepionm...ditec.net."
"atistar.net." through "ripencc.org."
"roysdon.org." through "bask.se."
"bazoka.se." through "hammarback.se."
"handlasmart.se." through "minwebbis.se."
"mirk.se." through "sorppa.se."
"spam112.se." through "xn--brsdata-90a.se."
"xn--brsnot...g-zzbl.se." through "klingon-em...ssy.co.za."
All Monitored Zones: (in DNS canonical order):
"." through "146.63.in-addr.arpa."
"11.146.63....addr.arpa." through "hotspot.v.bg."
"imena.v.bg." through "ite.net.br."
"kuroiwa.net.br." through "legalexchange.com."
"leonom.com." through "eurosanit.cz."
"everyone.cz." through "jencam.de."
"jenoptik.de." through "idaho.gov."
"idahobyways.gov." through "nl."
"aflospersoneel.nl." through "ok.unknown...etlabs.nl."
"sigexpired...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "ok.unknown...etlabs.nl."
"bogussig.o...etlabs.nl." through "bogussig.s...etlabs.nl."
"nods.sigex...etlabs.nl." through "nods.bogus...etlabs.nl."
"ok.bogussi...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "bogussig.s...etlabs.nl."
"nods.signo...etlabs.nl." through "nods.nods....etlabs.nl."
"ok.nods.un...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "unknownalg...etlabs.nl."
"bogussig.u...etlabs.nl." through "nods.ok.si...etlabs.nl."
"ok.ok.sige...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "daedelys.org."
"datsec.org." through "cesare-paciotti.ru."
"champio.ru." through "smartmoney.ru."
"smas.ru." through "ehdrift.se."
"ehgo.se." through "mobilbredb...kollen.se."
"mobileinfo.se." through "tossorna.se."
"tostesegerdahl.se." through "zw."

Distribution of the number of vulnerable RRsets in zones

Distribution of key lifetimes on DNSKEY RRsets

Production Islands of trust