|
Posted by Lutz Donnerhacke on August 1, 2008, 10:26 am
If you were Registered and logged in, you could reply and use other advanced thread options
Overview of 21079 signed zones:
1591 +109 Entry Point
18692 +9071 Test
14 -3 broken chain
693 +108 chained
0 new
89 +3 unreachable
Top 10 autonomous systems injecting DNSSec zones:
674 -23 AS25537
495 +33 AS15725
141 +4 AS1280
118 +48 AS4230
89 +3 AS22548
79 +1 AS3333
71 AS3245
50 +50 AS8167
37 -5 AS24776
36 +8 AS39570
Top 10 TLD containing DNSSec zones:
674 -23 RU
310 +79 BR
308 +17 ARPA
249 +20 DE
194 +29 COM
143 +20 ORG
112 +21 SE
74 +17 NET
71 BG
29 -6 FR
29 (-4) weak keys:
55.129.in-addr.arpa, omnity.biz, sandelman.ottawa.on.ca, arakelian.com
intra-links.com, lecorvaisier.com, nikomotos.com, agent-factory.de
the-agent-factory.de, ll.mit.edu, aarechargement.fr, gigamax.fr
guiraudsa.fr, intra-links.fr, john-nathan.fr, lbpdecoration.fr
lesbeauxpapiers.fr, vrai-decor.fr, intra-links.net, timmins.net
il.fontys.nl, daedelys.org, rp.secret-wg.org, interlan.se, keyserver.se
spam112.se, staver.se, umdac.se, vfqa.se
14 (-3) broken DS chains:
228.111.193.in-addr.arpa, kobayashi.eti.br, rafaeljusto.eti.br
juventudeweb.mte.gov.br, jtes.jus.br, tjmsp.jus.br, tjsc.jus.br
im.trf5.jus.br, trt17.jus.br, trt6.jus.br, ornl.dnsops.gov
zoidberg.nlnetlabs.nl, exempel1.tset.se, exempel2.tset.se
22 (-4) parent DS to unsigned zones:
157.110.193.in-addr.arpa, 178.170.195.in-addr.arpa, 128.111.89.in-addr.arpa
129.111.89.in-addr.arpa, 130.111.89.in-addr.arpa, 131.111.89.in-addr.arpa
132.111.89.in-addr.arpa, 133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa
135.111.89.in-addr.arpa, 136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa
lobbi.bg, tjmt.jus.br, tjrr.jus.br, blopp.se, brixtal.se
hogskolaniboras.se, klan-csa.se, kristianstadpower.se, mirall.se
xn--botsmarksdck-pcb.se
45 (+15) unnecessary islands:
9.9.6.2.2.8.4.e164.arpa, 8.0.6.4.1.4.6.3.9.4.e164.arpa
3.7.5.1.4.6.3.9.4.e164.arpa, 1.0.8.1.0.4.0.4.9.4.e164.arpa
2.2.0.2.4.6.3.3.6.6.9.4.e164.arpa, 1.2.0.0.1.8.e164.arpa
64-26.0.149.193.in-addr.arpa, 0.68.193.in-addr.arpa
178.25.217.in-addr.arpa, 241.75.217.in-addr.arpa
4.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 5.2.0.0.1.6.0.1.0.0.2.ip6.arpa
6.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 7.2.0.0.1.6.0.1.0.0.2.ip6.arpa
1.0.0.0.e.4.7.c.3.6.8.d.2.0.0.2.ip6.arpa, e.8.1.c.8.0.3.0.1.0.a.2.ip6.arpa
cerebrohidroponico.blog.br, pixaco.com.br, eficacia.eng.br, mendes.eng.br
tj.ce.gov.br, jfce.gov.br, tjm.sp.gov.br, trt22.gov.br, lacnicxi.nic.br
wln.psi.br, home.clegg.com, bldr.nist.gov, bw.nist.gov, cst-b.nist.gov
emd.nist.gov, mrd.nist.gov, mtdiv.nist.gov, plant.nist.gov, tfd.nist.gov
rev.faelix.net, signed.dnssec-test.org, dyn.johani.org, ddns.klubkev.org
autonomica.se, skabb.se, sm6rpc.se, staver.se, xn--lda-ula.xn--ihrn-dpa.se
zkt.se
89 (+3) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
38 +6 AS25537
10 -2 AS5537
10 +9 AS4555
3 -2 AS39570
2 +2 AS12178
2 AS7132
2 +2 AS35470
1 +1 AS2648
1 AS3292
1 AS3265
--
Detailed list: http://www.iks-jena.de/leistungen/dnssec.php
Outsourcing DNSSEC: http://www.iks-jena.de/dnssec_remote.html
Checking your domain: http://www.iks-jena.de/cgi-bin/dnssec_how_dns_works.pl
|
|
Posted by Lutz Donnerhacke on August 1, 2008, 10:31 am
If you were Registered and logged in, you could reply and use other advanced thread options
* Lutz Donnerhacke wrote:
> Overview of 21079 signed zones:
> 1591 +109 Entry Point
> 18692 +9071 Test
> 14 -3 broken chain
> 693 +108 chained
> 0 new
> 89 +3 unreachable
Sorry for the three months delay in posting this report. So the rates seem
more impressive than they are.
In the last few days, a significant run to DNSSEC deployment occured for
obvious reasons. Let's hope that this deployment will stay on a strong ground.
|
|
Posted by Lutz Donnerhacke on October 13, 2008, 6:13 am
If you were Registered and logged in, you could reply and use other advanced thread options
> 1750 +159 Entry Point
> 775 +82 chained
>
> Top 10 TLD containing DNSSec zones:
> 686 +12 RU
> 338 +30 ARPA
> 323 +13 BR
> 262 +13 DE
> 224 +30 COM
> 185 +42 ORG
> 136 +24 SE
> 86 +12 NET
> 82 +11 BG
> 36 +36 PR
Current DNSSEC debate as well as the Kaminsky spectacle pushed the dnssec
deployment to a new high.
|
|
Posted by Dave Krueger on October 13, 2008, 8:32 am
If you were Registered and logged in, you could reply and use other advanced thread options
On Mon, 13 Oct 2008 10:10:35 +0000 (UTC), Lutz Donnerhacke wrote:
> gigamax.fr,
There is your answer! Frogs!
--
Mommy, Daddy, can i live with you the rest of my life?
Waaaaaaaaaa!!!! i umpire but i don wanna work either.
______________
/ \
| WHAAAAAAAAAAA! |
\__ _________/
/ ,'
_.~._ /,'
,~'.~@~.`~.
/ : _..._ : \
{ :,"''\`".: }
`C) 0 _ 0 (--.._,-"""-.__
( ) @ ( ) `.
`-.-_-.-' \
,' \ / ,` ;`-._,-.
,' ,'/ ,' `---t.,-. \_
,--.,',' ,'----.__\ _( \----'
'///,`,--.,' `-.__.--' `. )
'///,' `-`
|
|
XML site map