SecSpider the DNSSEC Monitoring Project
Home | Blog | Documentation | Trust-Anchors | Pollers | GPG Key
Check out our new sister-project Vantages with libvdns, dnsfunnel, and vantaged!
We now have TA files for both modern resolvers and older instances of BIND that don't support all key types on our Trust Anchors Page

To add a zone for monitoring, please submit below:

Vouch for or against a zone's production status

For more information, questions, or comments please contact:
Eric Osterweil (eoster@cs.ucla.edu)
Dan Massey (massey@cs.colostate.edu)
Lixia Zhang (lixia@cs.ucla.edu)

Search for zone:

DNSSEC Deployment status as of: Wed Dec 14 06:41:56 2011 UTC

Deployment Metrics:

[What are these?]
Availability Metric: 0.743

Verifiability Metric: 0.423

Validity Metric: < 0.932, 0.937 >

Detailed Monitoring Summary:

67623 Zones
35556 Zones have NS sets that match their parents' delegation set
37191 DNSSEC enabled zones
32337 Zones use both KSKs and ZSKs
31317 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
RSA/MD5 [RSAMD5]28
Diffie-Hellman [DH]0
DSA/SHA-1 [DSA]156
Elliptic Curve [ECC]0
RSA/SHA-1 [RSASHA1]86053
Indirect [INDIRECT]0
DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]0
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]6467
RSA/SHA256 [RSASHA256]2581
RSA/SHA512 [RSASHA512]868
ECC/GOST [ECC-GOST]8
Private [PRIVATEDNS]0
Private [PRIVATEOID]0
Reserved 00
Reserved 2550
Unresolved Names0
Production DNSSEC-enabled Zones: (in DNS canonical order):
"." through "dotat.at."
"esetsoftware.at." through "gestor.eti.br."
"gilmarcand...do.eti.br." through "cpsclear.com."
"cpuvilafranca.com." through "noetperdis.com."
"nogurukart.com." through "a-koupelny...topeni.cz."
"a-leasing.cz." through "alarmprofi.cz."
"alarmy-cz.cz." through "astracom.cz."
"astrahotel.cz." through "cdma.cz."
"cdpotisk.cz." through "east-express.cz."
"eastsilver.cz." through "haf.cz."
"hafzjundrova.cz." through "kempkomornik.cz."
"kempvaclav.cz." through "mestysbudisov.cz."
"meta-kuryr.cz." through "pakatel.cz."
"pakl.cz." through "rekant.cz."
"rekka.cz." through "stesys.cz."
"stevenson.cz." through "virtualtravel.cz."
"virtualtrebic.cz." through "tinyhunter.de."
"tmgabi02.de." through "spectrum.gov."
"ssa.gov." through "tenaflynj.org."
"testshib.org." through "vweb.co.za."
All Monitored Zones: (in DNS canonical order):
"." through "e.4.7.c.3.....ip6.arpa."
"1.0.0.0.e.....ip6.arpa." through "contratoen...ia.com.br."
"controle-s...es.com.br." through "compreifat...ri.far.br."
"datamatrix.far.br." through "alteray.com."
"altodelleon.com." through "gesurbe.com."
"gha-engineers.com." through "radnoradvisors.com."
"radnortrust.com." through "aaa-auto-c...omutov.cz."
"aaa-auto-h...ralove.cz." through "almero.cz."
"almicork.cz." through "autobazar-eso.cz."
"autobazar-...analik.cz." through "dacor.cz."
"dadplus.cz." through "g-vest.cz."
"g100.cz." through "karug.cz."
"kary.cz." through "mogul-suma...rallye.cz."
"moisidis.cz." through "pohaservis.cz."
"pohlok.cz." through "skateobchod.cz."
"skateshop.cz." through "vairon.cz."
"vajatabak.cz." through "nach-scharbeutz.de."
"nachtigallenwelt.de." through "cdcfederal...ittee.gov."
"cebaf.gov." through "absolight.net."
"bl.absolight.net." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "unknownalg...etlabs.nl."
"nods.signo...etlabs.nl." through "ok.ok.nods...etlabs.nl."
"bogussig.o...etlabs.nl." through "nods.sigex...etlabs.nl."
"ok.sigexpi...etlabs.nl." through "nods.signo...c.tjeb.nl."
"ok.signoti...c.tjeb.nl." through "unknownalg...3.tjeb.nl."
"nods.bogus...3.tjeb.nl." through "estig.ipb.pt."
"ipca.pt." through "kma-club.ru."
"kmpn.ru." through "vkontalke.ru."
"vkonvtakte.ru." through "internytt.se."
"interware.se." through "zw."

Growth of DNSSEC deployment

Distribution of RRSIG lifetimes on DNSKEY RRsets

Production Islands of trust