SecSpider the DNSSEC Monitoring Project
Home | Blog | Documentation | Trust-Anchors | Pollers | GPG Key
Check out our BIND formatted Trust Anchors File!
Check out our new sister-project Vantages with libvdns, dnsfunnel, and vantaged!

To add a zone for monitoring, please submit below:

Vouch for or against a zone's production status

For more information, questions, or comments please contact:
Eric Osterweil (eoster@cs.ucla.edu)
Dan Massey (massey@cs.colostate.edu)
Lixia Zhang (lixia@cs.ucla.edu)

Search for zone:

Deployment status as of: Sat Nov 7 05:44:03 2009 UTC

Monitoring Summary:

18736 Zones
16809 Zones have NS sets that match their parents' delegation set
9205 DNSSEC enabled zones
4803 Zones use both KSKs and ZSKs
3675 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
RSA/MD5 [RSAMD5]35
Diffie-Hellman [DH]0
DSA/SHA-1 [DSA]27
Elliptic Curve [ECC]0
RSA/SHA-1 [RSASHA1]16571
Indirect [INDIRECT]0
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]352
Private [PRIVATEDNS]0
Private [PRIVATEOID]0
Reserved 00
Reserved 2550
Unknown Key 62
Unresolved Names0
Production DNSSEC-enabled Zones: (in DNS canonical order):
"lopp.ae." through "14.0.193.i...addr.arpa."
"15.0.193.i...addr.arpa." through "8.6.199.in...addr.arpa."
"9.6.199.in...addr.arpa." through "8.e.8.0.1.....ip6.arpa."
"9.0.1.0.0.....ip6.arpa." through "rikostyle.bg."
"rosiza.bg." through "panatlantica.com.br."
"pegasus.com.br." through "tre-rj.jus.br."
"tre-rn.jus.br." through "gruenekraft.com."
"guiraudsa.com." through "netsec.tislabs.com."
"tls-dicing.com." through "hyperkalkulacka.cz."
"hyperlink.cz." through "unisvar.cz."
"ural.cz." through "jvkmusik.de."
"jvknetwork.de." through "upenn.edu."
"cptc.wisc.edu." through "blogmate.net."
"c-l-i.net." through "surfsidecolony.org."
"taito.org." through "bet3.se."
"betterodds.se." through "hannamaria.se."
"hedin-consulting.se." through "mingla.se."
"minhockeyf...rening.se." through "cfl.soderhamn.se."
"soderlundsgolf.se." through "xn--bandbr...st-lcb.se."
"xn--bandbr...ng-5nb.se." through "klingon-em...ssy.co.za."
All Monitored Zones: (in DNS canonical order):
"." through "192-223.11...addr.arpa."
"211.63.in-addr.arpa." through "vrz99.bg."
"digsys.w.bg." through "troia.net.br."
"uninove.net.br." through "lillisque.com."
"limmared.com." through "frisia-sad...artony.cz."
"ftp.cz." through "jutta-baden.de."
"jvkmusik.de." through "sandia.gov."
"ran.sandia.gov." through "brugmanrad...atoren.nl."
"carise.nl." through "unknownalg...etlabs.nl."
"signotince...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "nods.bogus...etlabs.nl."
"ok.bogussi...etlabs.nl." through "bogussig.s...etlabs.nl."
"nods.sigex...etlabs.nl." through "signotince...etlabs.nl."
"bogussig.s...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "ok.ok.unkn...etlabs.nl."
"sigexpired...etlabs.nl." through "nods.unkno...etlabs.nl."
"ok.unknown...etlabs.nl." through "ok.signoti...etlabs.nl."
"bogussig.o...etlabs.nl." through "unknownalg...etlabs.nl."
"unknownalg...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "nods.nods....etlabs.nl."
"ok.nods.ok...etlabs.nl." through "cer-sncf-bx.org."
"chrr.org." through "businesscredit.ru."
"by-soft.ru." through "shpunt.ru."
"shri.ru." through "egamer.se."
"egendomar-...llsalu.se." through "misenbouteille.se."
"mittdop.se." through "tip-toe.se."
"tipsat.se." through "zw."

Distribution of the number of vulnerable RRsets in zones

Distribution of key lifetimes on DNSKEY RRsets

Production Islands of trust