[dns-operations] Aging TLD RSA DNSKEYs...

Viktor Dukhovni ietf-dane at dukhovni.org
Mon Jan 21 20:05:28 UTC 2019


On Mon, Jan 21, 2019 at 02:46:30PM +0100, Arsen STASIC wrote:

> Out of these 203 TLDs 164 (80%) are operated by Neustar, Inc.
> 
> Regarding to nTLDStats <https://ntldstats.com/backend/Neustar-Inc> 
> Neustar operates 271 TLDs. Either they have done some key roll overs, or 
> Viktor missed some Neustar TLDs. ;-)

I have all the TLDs covered, so perhaps some did get rolled over,
or use keys stronger than 1024 bits.

One thing I did not mention (because I only checked now), is that
one reason for so many TLDs having similarly aged keys, is that in
fact 124 TLDs share the same pair of 1024-bit ZSKs, and 57 of them
also share a third 1024-bit ZSK, all present since Oct 2017 ("kid"
is a unique database id for each key):

           qname       | alg | flags |    date    | kid | bits 
    -------------------+-----+-------+------------+-----+------
     aaa               |   8 |   256 | 2017-10-19 |  15 | 1024
     aaa               |   8 |   256 | 2017-10-19 |  16 | 1024
     aaa               |   8 |   256 | 2017-10-19 |  14 | 1024
     able              |   8 |   256 | 2017-10-19 |  14 | 1024
     able              |   8 |   256 | 2017-10-19 |  15 | 1024
     accountant        |   8 |   256 | 2017-10-19 |  15 | 1024
     accountant        |   8 |   256 | 2017-10-19 |  14 | 1024
     americanexpress   |   8 |   256 | 2017-10-19 |  14 | 1024
     americanexpress   |   8 |   256 | 2017-10-19 |  15 | 1024
     americanexpress   |   8 |   256 | 2017-10-19 |  16 | 1024
     amex              |   8 |   256 | 2017-10-19 |  15 | 1024
     amex              |   8 |   256 | 2017-10-19 |  16 | 1024
     amex              |   8 |   256 | 2017-10-19 |  14 | 1024
     athleta           |   8 |   256 | 2017-10-19 |  15 | 1024
     athleta           |   8 |   256 | 2017-10-19 |  16 | 1024
     athleta           |   8 |   256 | 2017-10-19 |  14 | 1024
     audible           |   8 |   256 | 2017-10-19 |  15 | 1024
     audible           |   8 |   256 | 2017-10-19 |  14 | 1024
     author            |   8 |   256 | 2017-10-19 |  15 | 1024
     author            |   8 |   256 | 2017-10-19 |  14 | 1024
     aws               |   8 |   256 | 2017-10-19 |  14 | 1024
     aws               |   8 |   256 | 2017-10-19 |  15 | 1024
     baby              |   8 |   256 | 2017-10-19 |  15 | 1024
     baby              |   8 |   256 | 2017-10-19 |  14 | 1024
     banamex           |   8 |   256 | 2017-10-19 |  14 | 1024
     banamex           |   8 |   256 | 2017-10-19 |  15 | 1024
     banamex           |   8 |   256 | 2017-10-19 |  16 | 1024
     bananarepublic    |   8 |   256 | 2017-10-19 |  15 | 1024
     bananarepublic    |   8 |   256 | 2017-10-19 |  14 | 1024
     bananarepublic    |   8 |   256 | 2017-10-19 |  16 | 1024
     baseball          |   8 |   256 | 2017-10-19 |  15 | 1024
     baseball          |   8 |   256 | 2017-10-19 |  14 | 1024
     bible             |   8 |   256 | 2017-10-19 |  15 | 1024
     bible             |   8 |   256 | 2017-10-19 |  14 | 1024
     book              |   8 |   256 | 2017-10-19 |  14 | 1024
     book              |   8 |   256 | 2017-10-19 |  15 | 1024
     booking           |   8 |   256 | 2017-10-19 |  15 | 1024
     booking           |   8 |   256 | 2017-10-19 |  14 | 1024
     booking           |   8 |   256 | 2017-10-19 |  16 | 1024
     bot               |   8 |   256 | 2017-10-19 |  14 | 1024
     bot               |   8 |   256 | 2017-10-19 |  15 | 1024
     call              |   8 |   256 | 2017-10-19 |  15 | 1024
     call              |   8 |   256 | 2017-10-19 |  14 | 1024
     chase             |   8 |   256 | 2017-10-19 |  15 | 1024
     chase             |   8 |   256 | 2017-10-19 |  16 | 1024
     chase             |   8 |   256 | 2017-10-19 |  14 | 1024
     chintai           |   8 |   256 | 2017-10-19 |  16 | 1024
     chintai           |   8 |   256 | 2017-10-19 |  15 | 1024
     chintai           |   8 |   256 | 2017-10-19 |  14 | 1024
     circle            |   8 |   256 | 2017-10-19 |  14 | 1024
     circle            |   8 |   256 | 2017-10-19 |  15 | 1024
     citadel           |   8 |   256 | 2017-10-19 |  15 | 1024
     citadel           |   8 |   256 | 2017-10-19 |  14 | 1024
     citadel           |   8 |   256 | 2017-10-19 |  16 | 1024
     citi              |   8 |   256 | 2017-10-19 |  15 | 1024
     citi              |   8 |   256 | 2017-10-19 |  14 | 1024
     citi              |   8 |   256 | 2017-10-19 |  16 | 1024
     coupon            |   8 |   256 | 2017-10-19 |  15 | 1024
     coupon            |   8 |   256 | 2017-10-19 |  14 | 1024
     cricket           |   8 |   256 | 2017-10-19 |  15 | 1024
     cricket           |   8 |   256 | 2017-10-19 |  14 | 1024
     date              |   8 |   256 | 2017-10-19 |  15 | 1024
     date              |   8 |   256 | 2017-10-19 |  14 | 1024
     deal              |   8 |   256 | 2017-10-19 |  15 | 1024
     deal              |   8 |   256 | 2017-10-19 |  14 | 1024
     dealer            |   8 |   256 | 2017-10-19 |  15 | 1024
     dealer            |   8 |   256 | 2017-10-19 |  14 | 1024
     discover          |   8 |   256 | 2017-10-19 |  16 | 1024
     discover          |   8 |   256 | 2017-10-19 |  14 | 1024
     discover          |   8 |   256 | 2017-10-19 |  15 | 1024
     download          |   8 |   256 | 2017-10-19 |  15 | 1024
     download          |   8 |   256 | 2017-10-19 |  14 | 1024
     duns              |   8 |   256 | 2017-10-19 |  15 | 1024
     duns              |   8 |   256 | 2017-10-19 |  14 | 1024
     duns              |   8 |   256 | 2017-10-19 |  16 | 1024
     dupont            |   8 |   256 | 2017-10-19 |  16 | 1024
     dupont            |   8 |   256 | 2017-10-19 |  14 | 1024
     dupont            |   8 |   256 | 2017-10-19 |  15 | 1024
     earth             |   8 |   256 | 2017-10-19 |  14 | 1024
     earth             |   8 |   256 | 2017-10-19 |  15 | 1024
     farmers           |   8 |   256 | 2017-10-19 |  16 | 1024
     farmers           |   8 |   256 | 2017-10-19 |  14 | 1024
     farmers           |   8 |   256 | 2017-10-19 |  15 | 1024
     fast              |   8 |   256 | 2017-10-19 |  14 | 1024
     fast              |   8 |   256 | 2017-10-19 |  15 | 1024
     fire              |   8 |   256 | 2017-10-19 |  15 | 1024
     fire              |   8 |   256 | 2017-10-19 |  14 | 1024
     flickr            |   8 |   256 | 2017-10-19 |  14 | 1024
     flickr            |   8 |   256 | 2017-10-19 |  16 | 1024
     flickr            |   8 |   256 | 2017-10-19 |  15 | 1024
     ford              |   8 |   256 | 2017-10-19 |  16 | 1024
     ford              |   8 |   256 | 2017-10-19 |  15 | 1024
     ford              |   8 |   256 | 2017-10-19 |  14 | 1024
     fox               |   8 |   256 | 2017-10-19 |  16 | 1024
     fox               |   8 |   256 | 2017-10-19 |  15 | 1024
     fox               |   8 |   256 | 2017-10-19 |  14 | 1024
     free              |   8 |   256 | 2017-10-19 |  14 | 1024
     free              |   8 |   256 | 2017-10-19 |  15 | 1024
     ftr               |   8 |   256 | 2017-10-19 |  14 | 1024
     ftr               |   8 |   256 | 2017-10-19 |  15 | 1024
     ftr               |   8 |   256 | 2017-10-19 |  16 | 1024
     gap               |   8 |   256 | 2017-10-19 |  15 | 1024
     gap               |   8 |   256 | 2017-10-19 |  16 | 1024
     gap               |   8 |   256 | 2017-10-19 |  14 | 1024
     got               |   8 |   256 | 2017-10-19 |  15 | 1024
     got               |   8 |   256 | 2017-10-19 |  14 | 1024
     grainger          |   8 |   256 | 2017-10-19 |  14 | 1024
     grainger          |   8 |   256 | 2017-10-19 |  15 | 1024
     health            |   8 |   256 | 2017-10-19 |  15 | 1024
     health            |   8 |   256 | 2017-10-19 |  14 | 1024
     homegoods         |   8 |   256 | 2017-10-19 |  14 | 1024
     homegoods         |   8 |   256 | 2017-10-19 |  16 | 1024
     homegoods         |   8 |   256 | 2017-10-19 |  15 | 1024
     homesense         |   8 |   256 | 2017-10-19 |  15 | 1024
     homesense         |   8 |   256 | 2017-10-19 |  16 | 1024
     homesense         |   8 |   256 | 2017-10-19 |  14 | 1024
     honeywell         |   8 |   256 | 2017-10-19 |  16 | 1024
     honeywell         |   8 |   256 | 2017-10-19 |  14 | 1024
     honeywell         |   8 |   256 | 2017-10-19 |  15 | 1024
     hot               |   8 |   256 | 2017-10-19 |  14 | 1024
     hot               |   8 |   256 | 2017-10-19 |  15 | 1024
     hotels            |   8 |   256 | 2017-10-19 |  15 | 1024
     hotels            |   8 |   256 | 2017-10-19 |  14 | 1024
     hyatt             |   8 |   256 | 2017-10-19 |  15 | 1024
     hyatt             |   8 |   256 | 2017-10-19 |  16 | 1024
     hyatt             |   8 |   256 | 2017-10-19 |  14 | 1024
     ieee              |   8 |   256 | 2017-10-19 |  16 | 1024
     ieee              |   8 |   256 | 2017-10-19 |  14 | 1024
     ieee              |   8 |   256 | 2017-10-19 |  15 | 1024
     imdb              |   8 |   256 | 2017-10-19 |  15 | 1024
     imdb              |   8 |   256 | 2017-10-19 |  14 | 1024
     intel             |   8 |   256 | 2017-10-19 |  15 | 1024
     intel             |   8 |   256 | 2017-10-19 |  16 | 1024
     intel             |   8 |   256 | 2017-10-19 |  14 | 1024
     intuit            |   8 |   256 | 2017-10-19 |  16 | 1024
     intuit            |   8 |   256 | 2017-10-19 |  14 | 1024
     intuit            |   8 |   256 | 2017-10-19 |  15 | 1024
     jmp               |   8 |   256 | 2017-10-19 |  15 | 1024
     jmp               |   8 |   256 | 2017-10-19 |  16 | 1024
     jmp               |   8 |   256 | 2017-10-19 |  14 | 1024
     jnj               |   8 |   256 | 2017-10-19 |  15 | 1024
     jnj               |   8 |   256 | 2017-10-19 |  14 | 1024
     jnj               |   8 |   256 | 2017-10-19 |  16 | 1024
     jot               |   8 |   256 | 2017-10-19 |  15 | 1024
     jot               |   8 |   256 | 2017-10-19 |  14 | 1024
     joy               |   8 |   256 | 2017-10-19 |  14 | 1024
     joy               |   8 |   256 | 2017-10-19 |  15 | 1024
     jpmorgan          |   8 |   256 | 2017-10-19 |  16 | 1024
     jpmorgan          |   8 |   256 | 2017-10-19 |  15 | 1024
     jpmorgan          |   8 |   256 | 2017-10-19 |  14 | 1024
     kindle            |   8 |   256 | 2017-10-19 |  15 | 1024
     kindle            |   8 |   256 | 2017-10-19 |  14 | 1024
     kpmg              |   8 |   256 | 2017-10-19 |  15 | 1024
     kpmg              |   8 |   256 | 2017-10-19 |  16 | 1024
     kpmg              |   8 |   256 | 2017-10-19 |  14 | 1024
     like              |   8 |   256 | 2017-10-19 |  15 | 1024
     like              |   8 |   256 | 2017-10-19 |  14 | 1024
     lilly             |   8 |   256 | 2017-10-19 |  16 | 1024
     lilly             |   8 |   256 | 2017-10-19 |  15 | 1024
     lilly             |   8 |   256 | 2017-10-19 |  14 | 1024
     lincoln           |   8 |   256 | 2017-10-19 |  14 | 1024
     lincoln           |   8 |   256 | 2017-10-19 |  15 | 1024
     lincoln           |   8 |   256 | 2017-10-19 |  16 | 1024
     loan              |   8 |   256 | 2017-10-19 |  14 | 1024
     loan              |   8 |   256 | 2017-10-19 |  15 | 1024
     marshalls         |   8 |   256 | 2017-10-19 |  14 | 1024
     marshalls         |   8 |   256 | 2017-10-19 |  15 | 1024
     marshalls         |   8 |   256 | 2017-10-19 |  16 | 1024
     mint              |   8 |   256 | 2017-10-19 |  14 | 1024
     mint              |   8 |   256 | 2017-10-19 |  15 | 1024
     mint              |   8 |   256 | 2017-10-19 |  16 | 1024
     mlb               |   8 |   256 | 2017-10-19 |  15 | 1024
     mlb               |   8 |   256 | 2017-10-19 |  16 | 1024
     mlb               |   8 |   256 | 2017-10-19 |  14 | 1024
     moi               |   8 |   256 | 2017-10-19 |  14 | 1024
     moi               |   8 |   256 | 2017-10-19 |  15 | 1024
     mutual            |   8 |   256 | 2017-10-19 |  16 | 1024
     mutual            |   8 |   256 | 2017-10-19 |  14 | 1024
     mutual            |   8 |   256 | 2017-10-19 |  15 | 1024
     nfl               |   8 |   256 | 2017-10-19 |  14 | 1024
     nfl               |   8 |   256 | 2017-10-19 |  16 | 1024
     nfl               |   8 |   256 | 2017-10-19 |  15 | 1024
     now               |   8 |   256 | 2017-10-19 |  15 | 1024
     now               |   8 |   256 | 2017-10-19 |  14 | 1024
     office            |   8 |   256 | 2017-10-19 |  16 | 1024
     office            |   8 |   256 | 2017-10-19 |  15 | 1024
     office            |   8 |   256 | 2017-10-19 |  14 | 1024
     oldnavy           |   8 |   256 | 2017-10-19 |  15 | 1024
     oldnavy           |   8 |   256 | 2017-10-19 |  14 | 1024
     oldnavy           |   8 |   256 | 2017-10-19 |  16 | 1024
     open              |   8 |   256 | 2017-10-19 |  14 | 1024
     open              |   8 |   256 | 2017-10-19 |  15 | 1024
     open              |   8 |   256 | 2017-10-19 |  16 | 1024
     osaka             |   8 |   256 | 2017-10-19 |  15 | 1024
     osaka             |   8 |   256 | 2017-10-19 |  14 | 1024
     party             |   8 |   256 | 2017-10-19 |  14 | 1024
     party             |   8 |   256 | 2017-10-19 |  15 | 1024
     pay               |   8 |   256 | 2017-10-19 |  14 | 1024
     pay               |   8 |   256 | 2017-10-19 |  15 | 1024
     pin               |   8 |   256 | 2017-10-19 |  14 | 1024
     pin               |   8 |   256 | 2017-10-19 |  15 | 1024
     ping              |   8 |   256 | 2017-10-19 |  14 | 1024
     ping              |   8 |   256 | 2017-10-19 |  15 | 1024
     ping              |   8 |   256 | 2017-10-19 |  16 | 1024
     prime             |   8 |   256 | 2017-10-19 |  15 | 1024
     prime             |   8 |   256 | 2017-10-19 |  14 | 1024
     qvc               |   8 |   256 | 2017-10-19 |  14 | 1024
     qvc               |   8 |   256 | 2017-10-19 |  15 | 1024
     qvc               |   8 |   256 | 2017-10-19 |  16 | 1024
     racing            |   8 |   256 | 2017-10-19 |  14 | 1024
     racing            |   8 |   256 | 2017-10-19 |  15 | 1024
     read              |   8 |   256 | 2017-10-19 |  15 | 1024
     read              |   8 |   256 | 2017-10-19 |  14 | 1024
     room              |   8 |   256 | 2017-10-19 |  15 | 1024
     room              |   8 |   256 | 2017-10-19 |  14 | 1024
     safe              |   8 |   256 | 2017-10-19 |  14 | 1024
     safe              |   8 |   256 | 2017-10-19 |  15 | 1024
     sas               |   8 |   256 | 2017-10-19 |  14 | 1024
     sas               |   8 |   256 | 2017-10-19 |  15 | 1024
     sas               |   8 |   256 | 2017-10-19 |  16 | 1024
     save              |   8 |   256 | 2017-10-19 |  14 | 1024
     save              |   8 |   256 | 2017-10-19 |  15 | 1024
     science           |   8 |   256 | 2017-10-19 |  15 | 1024
     science           |   8 |   256 | 2017-10-19 |  14 | 1024
     secure            |   8 |   256 | 2017-10-19 |  14 | 1024
     secure            |   8 |   256 | 2017-10-19 |  15 | 1024
     silk              |   8 |   256 | 2017-10-19 |  15 | 1024
     silk              |   8 |   256 | 2017-10-19 |  14 | 1024
     skype             |   8 |   256 | 2017-10-19 |  15 | 1024
     skype             |   8 |   256 | 2017-10-19 |  14 | 1024
     skype             |   8 |   256 | 2017-10-19 |  16 | 1024
     smile             |   8 |   256 | 2017-10-19 |  15 | 1024
     smile             |   8 |   256 | 2017-10-19 |  14 | 1024
     song              |   8 |   256 | 2017-10-19 |  15 | 1024
     song              |   8 |   256 | 2017-10-19 |  14 | 1024
     spot              |   8 |   256 | 2017-10-19 |  14 | 1024
     spot              |   8 |   256 | 2017-10-19 |  15 | 1024
     statefarm         |   8 |   256 | 2017-10-19 |  16 | 1024
     statefarm         |   8 |   256 | 2017-10-19 |  14 | 1024
     statefarm         |   8 |   256 | 2017-10-19 |  15 | 1024
     stream            |   8 |   256 | 2017-10-19 |  14 | 1024
     stream            |   8 |   256 | 2017-10-19 |  15 | 1024
     swiftcover        |   8 |   256 | 2017-10-19 |  16 | 1024
     swiftcover        |   8 |   256 | 2017-10-19 |  15 | 1024
     swiftcover        |   8 |   256 | 2017-10-19 |  14 | 1024
     talk              |   8 |   256 | 2017-10-19 |  15 | 1024
     talk              |   8 |   256 | 2017-10-19 |  14 | 1024
     tdk               |   8 |   256 | 2017-10-19 |  14 | 1024
     tdk               |   8 |   256 | 2017-10-19 |  15 | 1024
     tdk               |   8 |   256 | 2017-10-19 |  16 | 1024
     teva              |   8 |   256 | 2017-10-19 |  14 | 1024
     teva              |   8 |   256 | 2017-10-19 |  15 | 1024
     teva              |   8 |   256 | 2017-10-19 |  16 | 1024
     tjmaxx            |   8 |   256 | 2017-10-19 |  16 | 1024
     tjmaxx            |   8 |   256 | 2017-10-19 |  14 | 1024
     tjmaxx            |   8 |   256 | 2017-10-19 |  15 | 1024
     tjx               |   8 |   256 | 2017-10-19 |  16 | 1024
     tjx               |   8 |   256 | 2017-10-19 |  15 | 1024
     tjx               |   8 |   256 | 2017-10-19 |  14 | 1024
     tkmaxx            |   8 |   256 | 2017-10-19 |  16 | 1024
     tkmaxx            |   8 |   256 | 2017-10-19 |  14 | 1024
     tkmaxx            |   8 |   256 | 2017-10-19 |  15 | 1024
     tube              |   8 |   256 | 2017-10-19 |  15 | 1024
     tube              |   8 |   256 | 2017-10-19 |  14 | 1024
     tunes             |   8 |   256 | 2017-10-19 |  15 | 1024
     tunes             |   8 |   256 | 2017-10-19 |  14 | 1024
     vivo              |   8 |   256 | 2017-10-19 |  14 | 1024
     vivo              |   8 |   256 | 2017-10-19 |  15 | 1024
     vivo              |   8 |   256 | 2017-10-19 |  16 | 1024
     weatherchannel    |   8 |   256 | 2017-10-19 |  15 | 1024
     weatherchannel    |   8 |   256 | 2017-10-19 |  16 | 1024
     weatherchannel    |   8 |   256 | 2017-10-19 |  14 | 1024
     winners           |   8 |   256 | 2017-10-19 |  15 | 1024
     winners           |   8 |   256 | 2017-10-19 |  16 | 1024
     winners           |   8 |   256 | 2017-10-19 |  14 | 1024
     wow               |   8 |   256 | 2017-10-19 |  15 | 1024
     wow               |   8 |   256 | 2017-10-19 |  14 | 1024
     xn--1ck2e1b       |   8 |   256 | 2017-10-19 |  15 | 1024
     xn--1ck2e1b       |   8 |   256 | 2017-10-19 |  14 | 1024
     xn--bck1b9a5dre4c |   8 |   256 | 2017-10-19 |  15 | 1024
     xn--bck1b9a5dre4c |   8 |   256 | 2017-10-19 |  14 | 1024
     xn--cck2b3b       |   8 |   256 | 2017-10-19 |  15 | 1024
     xn--cck2b3b       |   8 |   256 | 2017-10-19 |  14 | 1024
     xn--eckvdtc9d     |   8 |   256 | 2017-10-19 |  14 | 1024
     xn--eckvdtc9d     |   8 |   256 | 2017-10-19 |  15 | 1024
     xn--fct429k       |   8 |   256 | 2017-10-19 |  14 | 1024
     xn--fct429k       |   8 |   256 | 2017-10-19 |  15 | 1024
     xn--gckr3f0f      |   8 |   256 | 2017-10-19 |  14 | 1024
     xn--gckr3f0f      |   8 |   256 | 2017-10-19 |  15 | 1024
     xn--gk3at1e       |   8 |   256 | 2017-10-19 |  15 | 1024
     xn--gk3at1e       |   8 |   256 | 2017-10-19 |  14 | 1024
     xn--jvr189m       |   8 |   256 | 2017-10-19 |  14 | 1024
     xn--jvr189m       |   8 |   256 | 2017-10-19 |  15 | 1024
     xn--rovu88b       |   8 |   256 | 2017-10-19 |  15 | 1024
     xn--rovu88b       |   8 |   256 | 2017-10-19 |  14 | 1024
     yahoo             |   8 |   256 | 2017-10-19 |  15 | 1024
     yahoo             |   8 |   256 | 2017-10-19 |  14 | 1024
     yahoo             |   8 |   256 | 2017-10-19 |  16 | 1024
     you               |   8 |   256 | 2017-10-19 |  15 | 1024
     you               |   8 |   256 | 2017-10-19 |  14 | 1024
     zappos            |   8 |   256 | 2017-10-19 |  14 | 1024
     zappos            |   8 |   256 | 2017-10-19 |  15 | 1024
     zippo             |   8 |   256 | 2017-10-19 |  15 | 1024
     zippo             |   8 |   256 | 2017-10-19 |  16 | 1024
     zippo             |   8 |   256 | 2017-10-19 |  14 | 1024

A lot of "brand name" TLDs in that list, that are perhaps not
actively used, but at first glance a few might also be in active
use by public registrants.

The next biggest batch of cross-TLD key re-use has 8 TLDs, using
the same 2048-bit ZSK/KSK pair:

	 qname      | alg | flags |    date    | kid | bits
    ----------------+-----+-------+------------+-----+------
     anquan         |   8 |   257 | 2017-10-19 | 596 | 2048
     anquan         |   8 |   256 | 2017-10-19 | 595 | 2048
     shouji         |   8 |   257 | 2017-10-19 | 596 | 2048
     shouji         |   8 |   256 | 2017-10-19 | 595 | 2048
     xihuan         |   8 |   257 | 2017-10-19 | 596 | 2048
     xihuan         |   8 |   256 | 2017-10-19 | 595 | 2048
     xn--3ds443g    |   8 |   257 | 2017-10-19 | 596 | 2048
     xn--3ds443g    |   8 |   256 | 2017-10-19 | 595 | 2048
     xn--fiq228c5hs |   8 |   257 | 2017-10-19 | 596 | 2048
     xn--fiq228c5hs |   8 |   256 | 2017-10-19 | 595 | 2048
     yun            |   8 |   257 | 2017-10-19 | 596 | 2048
     yun            |   8 |   256 | 2017-10-19 | 595 | 2048
     xn--nyqy26a    |   8 |   257 | 2018-05-24 | 596 | 2048
     xn--nyqy26a    |   8 |   256 | 2018-05-24 | 595 | 2048
     xn--rhqv96g    |   8 |   257 | 2018-05-24 | 596 | 2048
     xn--rhqv96g    |   8 |   256 | 2018-05-24 | 595 | 2048

The 5 TLDs with 1280-bit KSKs turn out to all share the same key:

     qname | alg | flags |    date    | kid | bits
    -------+-----+-------+------------+-----+------
     bom   |   8 |   257 | 2017-10-19 |  76 | 1280
     final |   8 |   257 | 2017-10-19 |  76 | 1280
     globo |   8 |   257 | 2017-10-19 |  76 | 1280
     rio   |   8 |   257 | 2017-10-19 |  76 | 1280
     uol   |   8 |   257 | 2017-10-19 |  76 | 1280

And finally, three pairs of TLDs sharing KSK + ZSK:

	qname    | alg | flags |    date    |   kid    | bits
    -------------+-----+-------+------------+----------+------
     xn--1qqw23a |   8 |   257 | 2017-10-19 |        9 | 2048
     xn--1qqw23a |   8 |   256 | 2017-10-19 |        8 | 1024
     xn--xhq521b |   8 |   257 | 2018-04-30 |        9 | 2048
     xn--xhq521b |   8 |   256 | 2018-04-30 |        8 | 1024

     xn--55qx5d  |   8 |   257 | 2017-10-19 |      759 | 2048
     xn--55qx5d  |   8 |   256 | 2017-10-19 |      758 | 1024
     xn--io0a7i  |   8 |   257 | 2017-10-19 |      759 | 2048
     xn--io0a7i  |   8 |   256 | 2017-10-19 |      758 | 1024

     xn--fiqs8s  |   8 |   257 | 2017-12-22 | 13229716 | 2048
     xn--fiqz9s  |   8 |   257 | 2017-12-22 | 13229716 | 2048
     xn--fiqs8s  |   8 |   385 | 2018-03-23 |     3199 | 2048
     xn--fiqs8s  |   8 |   256 | 2018-03-23 | 16066920 | 1024
     xn--fiqz9s  |   8 |   385 | 2018-03-23 |     3199 | 2048
     xn--fiqz9s  |   8 |   256 | 2018-03-23 | 16066920 | 1024

The above aside, all the remaining keys are distinct.

-- 
	Viktor.



More information about the dns-operations mailing list