Some DNSSec statics

[Lutz Donnerhacke]

Overview of 1449 signed zones:
   1098   +5 Entry Point
      7      broken chain
    222  +27 chained
    122  +85 unreachable

Top 10 autonomous systems injecting DNSSec zones:
    440   -1 AS15725
    387      AS3265
     70      AS3333
     69      AS3557
     45  +45 AS16350
     32      AS25537
     32      AS3245
     27      AS24776
     23  +23 AS39570
     17      AS36810

Top 10 TLD containing DNSSec zones:
    359  +59 NL
    242      ARPA
    219   +1 DE
    213   +8 COM
     70  +38 SE
     64   +2 ORG
     54   +2 NET
     33      BG
     33      RU
     26      INFO

577 (+9) weak keys:
Top 10 autonomous systems injecting weak keys:
    360      AS3265 
     31   -1 AS25537 
     27      AS24776 
     13      AS3216 
     12      AS29632 
     10   -1 AS7132 
      7      AS20943 
      6      AS8228 
      5   -1 AS23342 
      5      AS8683 

7 broken DS chains:
  42.32.198.in-addr.arpa, badds.dnssec.jp, hostcount.ripe.net, k.ripe.net
  ris.ripe.net, jelte.nlnetlabs.nl, bitstring.se

12 parent DS to unsigned zones:
  128.111.89.in-addr.arpa, 129.111.89.in-addr.arpa, 131.111.89.in-addr.arpa
  132.111.89.in-addr.arpa, 133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa
  135.111.89.in-addr.arpa, 136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa
  138.111.89.in-addr.arpa, 139.111.89.in-addr.arpa, 140.111.89.in-addr.arpa

24 (+7) unnecessary islands:
  64-26.0.149.193.in-addr.arpa, 0.68.193.in-addr.arpa
  241.75.217.in-addr.arpa, 3.1.6.0.0.1.6.0.1.0.0.2.ip6.arpa
  7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa, amstel.bg, badnxt.dnssec.jp
  nods-ns.test.dnssec-tools.org, autonomica.se, bildframkallning.se, cafax.se
  echo-lan.se, fotoaffisch.se, fotopresent.se, fotoprints.se, hooden.se
  kortframkallning.se, nning.se, onlinefoto.se, pixaco.se, shinkuro.se
  skabb.se, staver.se, zkt.se

122 unreachable zones:
Top 10 autonomous systems containing unreachable zones:
     45      AS16350  
      4      AS10370  
      4      AS5537  
      2      AS7132  
      2      AS9150  
      2      AS40009  
      2      AS3561  
      1      AS39003  
      1      AS12996  
      1      AS31680  


-- 
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php