SecSpider

SecSpider the DNSSEC Monitoring Project

Check out our blog

To add a zone for monitoring, please submit below:

Vouch for or against a zone's production status

For more information, questions, or comments please contact:
Eric Osterweil (eoster@cs.ucla.edu)
Michael Ryan (michaelj@seas.ucla.edu)
Dan Massey (massey@cs.colostate.edu)

Search for zone:

Deployment status as of: Tue Jul 8 21:28:23 2008 UTC

Monitoring Summary:

12020

Zones

11543

Zones have NS sets that match their parents' delegation set

10532

DNSSEC enabled zones

940	Zones use both KSKs and ZSKs

957

Production DNSSEC-enabled zones

Distribution of key algorithms in use:

Algorithm	# Keys
RSA/MD5 [RSAMD5]	7
Diffie-Hellman [DH]	0
DSA/SHA-1 [DSA]	3
Elliptic Curve [ECC]	0
RSA/SHA-1 [RSASHA1]	6978
Indirect [INDIRECT]	0
Private [PRIVATEDNS]	0
Private [PRIVATEOID]	0
Reserved 0	0
Reserved 255	0

Production DNSSEC-enabled Zones: (in DNS canonical order):
"e164.arpa." through "19.0.193.i...addr.arpa."
"3.0.193.in...addr.arpa." through "3.6.199.in...addr.arpa."
"4.6.199.in...addr.arpa." through "193.17.217...addr.arpa."
"128/26.193...addr.arpa." through "91.in-addr.arpa."
"80.90.91.i...addr.arpa." through "pixaco.at."
"bg." through "digsys.r.bg."
"register.bg." through "jfce.gov.br."
"mtb.gov.br." through "abi13.com."
"agelada.com." through "lecorvaisier.com."
"life-gone-hazy.com." through "dnsx.xelerance.com."
"jitterx.xe...rance.com." through "drk-weimar.de."
"eset.de." through "jenoptik-a...echnik.de."
"jenoptik-dlg.de." through "prospacer.de."
"pureprove.de." through "netsec.col...state.edu."
"secspider.....ucla.edu." through "satellite.dnssec.jp."
"secure.dnssec.jp." through "chrr.org."
"dento.org." through "name.pr."
"net.pr." through "ofice-service.ru."
"oji.ru." through "cafax.se."
"callesidan.se." through "vedenbrant.se."
"vildavictoria.se." through "dento.us."

Distribution of the number of vulnerable RRsets in zones

Distribution of key lifetimes on DNSKEY RRsets

Islands of trust