2010/08/15
Which TLDs are now having Delegation Signer (DS) signed by root
A question can be asked do you know if which TLDs are DNSSEC-enabled and have been signed by root. I have a solution using "ldns-walk . | grep DS". As shown in the screen dump below, they are : .bg, .biz, .br, .cat, .cz, ..dk, edu. .lk, .museum, .na, .org, .tm, .uk. and .us. Hey, the US Government mandated the use of DNSSEC for .gov, what happens to .gov ?
Subscribe to:
Post Comments (Atom)
1 comment:
I wonder if it is some kind of staged roll out?
.se was very early with DNSSEC and have run it live for some time. But still has no DS in the root zone.
.eu was done in June, and sent out a press release saying the chain of trust will be completed as soon the root zone is signed.
https://ns.iana.org/dnssec/root.zone.signed lists 28 with DS:
arpa bg biz br cat ch cz dk edu gov int li lk museum my na nu org pr se th tm uk us ws xn--jxalpdlp xn--kgbechtv xn--zckzah
Post a Comment