|
Posted by Lutz Donnerhacke on February 4, 2008, 10:40 am
If you were Registered and logged in, you could reply and use other advanced thread options
> 33 (-839) weak keys:
Classification of weak keys has been changed. Starting with this month
exponent 3 keys are not longer considered as weak. Only keysizes shorter
than 1024 bits for key signing keys are reported here.
|
|
Posted by Lutz Donnerhacke on March 3, 2008, 6:38 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Overview of 11716 signed zones:
1503 -7 Entry Point
9620 Test
4 broken chain
496 +27 chained
0 new
93 +30 unreachable
Top 10 autonomous systems injecting DNSSec zones:
710 -7 AS25537
466 +1 AS15725
136 -1 AS1280
85 AS22548
78 AS3333
71 AS3245
42 AS24776
31 AS3265
28 AS39570
25 AS36810
Top 10 TLD containing DNSSec zones:
710 -7 RU
291 +1 ARPA
231 -2 DE
170 +4 COM
140 +33 BR
122 ORG
90 +2 SE
71 +1 BG
58 NET
35 +1 FR
31 (-2) weak keys:
55.129.in-addr.arpa, 124.32.198.in-addr.arpa, omnity.biz
sandelman.ottawa.on.ca, arakelian.com, intra-links.com, lecorvaisier.com
nikomotos.com, agent-factory.de, the-agent-factory.de, bethelks.edu
ll.mit.edu, aarechargement.fr, gigamax.fr, guiraudsa.fr, intra-links.fr
john-nathan.fr, lbpdecoration.fr, lesbeauxpapiers.fr, taplow-consulting.fr
vrai-decor.fr, intra-links.net, rp.secret-wg.org, interlan.se, keyserver.se
skabb.se, spam112.se, staver.se, umdac.se, vfqa.se, zkt.se
4 broken DS chains:
228.111.193.in-addr.arpa, sparta.dnsops.biz, ornl.dnsops.gov, bitstring.se
25 parent DS to unsigned zones:
0.20.149.in-addr.arpa, 64.20.149.in-addr.arpa, 157.110.193.in-addr.arpa
178.170.195.in-addr.arpa, 128.111.89.in-addr.arpa, 129.111.89.in-addr.arpa
130.111.89.in-addr.arpa, 131.111.89.in-addr.arpa, 132.111.89.in-addr.arpa
133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa, 135.111.89.in-addr.arpa
136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa, 138.111.89.in-addr.arpa
139.111.89.in-addr.arpa, 140.111.89.in-addr.arpa, blopp.se
hogskolaniboras.se, klan-csa.se, kristianstadpower.se, lyrek.se, mirall.se
tshirttryck.se, xn--botsmarksdck-pcb.se
32 (+1) unnecessary islands:
8.4.e164.arpa, 8.0.6.4.1.4.6.3.9.4.e164.arpa, 3.7.5.1.4.6.3.9.4.e164.arpa
2.2.0.2.4.6.3.3.6.6.9.4.e164.arpa, 1.2.0.0.1.8.e164.arpa
0.68.193.in-addr.arpa, 42.32.198.in-addr.arpa, 178.25.217.in-addr.arpa
241.75.217.in-addr.arpa, 4.2.0.0.1.6.0.1.0.0.2.ip6.arpa
5.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 6.2.0.0.1.6.0.1.0.0.2.ip6.arpa
7.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa
1.0.0.0.e.4.7.c.3.6.8.d.2.0.0.2.ip6.arpa, e.8.1.c.8.0.3.0.1.0.a.2.ip6.arpa
metalplast.bg, cerebrohidroponico.blog.br, digitaltv.blog.br, pixaco.com.br
eficacia.eng.br, tjmg.gov.br, rev.faelix.net, dyn.johani.org
ddns.klubkev.org, autonomica.se, echo-lan.se, shinkuro.se, skabb.se
staver.se, xn--lda-ula.xn--ihrn-dpa.se, zkt.se
93 (+30) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
37 +12 AS25537
12 AS5537
9 +8 AS22548
7 +6 AS15725
6 +1 AS39570
3 +2 AS7132
3 AS23504
2 +1 AS3265
2 +2 AS8228
1 +1 AS20852
--
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php
|
|
Posted by Lutz Donnerhacke on March 3, 2008, 6:41 pm
If you were Registered and logged in, you could reply and use other advanced thread options > Top 10 TLD containing DNSSec zones:
> 140 +33 BR
Main contributor is the ministry of justice. They signed all their subzones.
Futhermore some new top level domains got signed:
xn--0zwm56d, xn--11b5bs3a9aj6g, xn--80akhbyknj4f, xn--9t4b11yi5a,
xn--deba0ad, xn--g6w251d, xn--hgbk6aj7f53bba, xn--hlcj6aya9esc7a,
xn--jxalpdlp, xn--kgbechtv, xn--zckzah.
I consider them as test domains, but this shows how far the ICANN reached
their signing practice.
|
|
Posted by Lutz Donnerhacke on March 3, 2008, 6:48 pm
If you were Registered and logged in, you could reply and use other advanced thread options > Top 10 TLD containing DNSSec zones:
> 140 +33 BR
Main contributor is the ministry of justice. They signed all their subzones.
Futhermore some new top level domains got signed:
xn--0zwm56d, xn--11b5bs3a9aj6g, xn--80akhbyknj4f, xn--9t4b11yi5a,
xn--deba0ad, xn--g6w251d, xn--hgbk6aj7f53bba, xn--hlcj6aya9esc7a,
xn--jxalpdlp, xn--kgbechtv, xn--zckzah.
I consider them as test domains, but this shows how far the ICANN reached
their signing practice.
|
|
Posted by Lutz Donnerhacke on April 2, 2008, 10:19 am
If you were Registered and logged in, you could reply and use other advanced thread options
1482 -21 Entry Point
9621 +1 Test
17 +13 broken chain
585 +89 chained
0 new
86 -7 unreachable
Top 10 autonomous systems injecting DNSSec zones:
697 -13 AS25537
462 -4 AS15725
137 +1 AS1280
86 +1 AS22548
78 AS3333
71 AS3245
70 +70 AS4230
42 AS24776
31 AS3265
28 AS39570
Top 10 TLD containing DNSSec zones:
697 -13 RU
291 ARPA
231 +91 BR
229 -2 DE
165 -5 COM
123 +1 ORG
91 +1 SE
71 BG
57 -1 NET
35 FR
33 (+2) weak keys:
55.129.in-addr.arpa, 124.32.198.in-addr.arpa, omnity.biz, jfce.jus.br
sandelman.ottawa.on.ca, arakelian.com, intra-links.com, lecorvaisier.com
nikomotos.com, agent-factory.de, the-agent-factory.de, bethelks.edu
ll.mit.edu, aarechargement.fr, gigamax.fr, guiraudsa.fr, intra-links.fr
john-nathan.fr, lbpdecoration.fr, lesbeauxpapiers.fr, vrai-decor.fr
intra-links.net, kfuq.net, daedelys.org, rp.secret-wg.org, interlan.se
keyserver.se, skabb.se, spam112.se, staver.se, umdac.se, vfqa.se, zkt.se
17 (+13) broken DS chains:
228.111.193.in-addr.arpa, sparta.dnsops.biz, jfac.jus.br, jfam.jus.br
jfap.jus.br, jfba.jus.br, jfce.jus.br, jfdf.jus.br, jfma.jus.br
jfmg.jus.br, jfpe.jus.br, jfro.jus.br, jfrr.jus.br, trf1.jus.br
ornl.dnsops.gov, ipv4.stack.nl, bitstring.se
26 (+1) parent DS to unsigned zones:
0.20.149.in-addr.arpa, 157.110.193.in-addr.arpa, 178.170.195.in-addr.arpa
128.111.89.in-addr.arpa, 129.111.89.in-addr.arpa, 130.111.89.in-addr.arpa
131.111.89.in-addr.arpa, 132.111.89.in-addr.arpa, 133.111.89.in-addr.arpa
134.111.89.in-addr.arpa, 135.111.89.in-addr.arpa, 136.111.89.in-addr.arpa
137.111.89.in-addr.arpa, 138.111.89.in-addr.arpa, 139.111.89.in-addr.arpa
140.111.89.in-addr.arpa, lobbi.bg, niet.verweg.com, blopp.se
hogskolaniboras.se, klan-csa.se, kristianstadpower.se, lyrek.se, mirall.se
tshirttryck.se, xn--botsmarksdck-pcb.se
30 (-2) unnecessary islands:
8.4.e164.arpa, 9.9.6.2.2.8.4.e164.arpa, 8.0.6.4.1.4.6.3.9.4.e164.arpa
3.7.5.1.4.6.3.9.4.e164.arpa, 2.2.0.2.4.6.3.3.6.6.9.4.e164.arpa
1.2.0.0.1.8.e164.arpa, 0.68.193.in-addr.arpa, 42.32.198.in-addr.arpa
178.25.217.in-addr.arpa, 241.75.217.in-addr.arpa
4.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 5.2.0.0.1.6.0.1.0.0.2.ip6.arpa
6.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 7.2.0.0.1.6.0.1.0.0.2.ip6.arpa
7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa, 1.0.0.0.e.4.7.c.3.6.8.d.2.0.0.2.ip6.arpa
e.8.1.c.8.0.3.0.1.0.a.2.ip6.arpa, metalplast.bg, cerebrohidroponico.blog.br
digitaltv.blog.br, pixaco.com.br, eficacia.eng.br, bw.nist.gov
rev.faelix.net, signed.dnssec-test.org, autonomica.se, skabb.se, staver.se
xn--lda-ula.xn--ihrn-dpa.se, zkt.se
86 (-7) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
32 -5 AS25537
12 AS5537
8 +1 AS15725
5 -1 AS39570
3 AS1280
3 +3 AS18881
1 AS10466
1 AS24776
1 +1 AS3292
1 AS4436
--
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php
|
|
XML site map