[dns-operations] DNSSEC quality by TLD

John Levine johnl at taugh.com
Thu May 17 14:22:17 UTC 2018


In article <4F95EC50-69F5-49E2-8470-C4D358DB4AF6 at dukhovni.org> you write:
>        TLD name DS count  OK ever   OK now    / ever     / now
>        -------- --------  -------   ------    ------     -----
>            bank     2954     2936     1604  0.993907  0.542993

If those numbers are correct, they're really pitiful.  Bank is
supposed to be a super secure TLD, careful checking of registrants
to be sure they're real banks, and every delegation is signed.

I checked, the current zone file has DS for every NS.  How are
they broken?

-- 
Regards,
John Levine, johnl at iecc.com, Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail. https://jl.ly



More information about the dns-operations mailing list