[Dnssec-deployment] Signed top level domains

[Joe Abley]

On 2010-07-09, at 10:39, Edward Lewis wrote:

> Just checking.  I now count 24 top level domains with DNSKEY records, 
> excluding the test IDNs.  Is that an accurate count?

Including the test IDNs, I count 35:

[octopus:~]% dig @xfr.lax.dns.icann.org . axfr | \
pipe> awk '/^[a-zA-Z0-9-]+\.[[:space:]]/ { print $1, "dnskey"; }' | \
pipe pipe> sort | uniq | dig -f - | grep -c 'ANSWER: [1-9]'
35
[octopus:~]% 

These are the TLDs:

[octopus:~]% dig @xfr.lax.dns.icann.org . axfr | \
pipe> awk '/^[a-zA-Z0-9-]+\.[[:space:]]/ { print $1, "dnskey"; }' | \
pipe pipe> sort | uniq | dig -f - | \
pipe pipe pipe pipe pipe> awk '/^[a-zA-Z0-9].*DNSKEY/ { print $1; }' | \
pipe pipe pipe pipe pipe pipe> sort | uniq
arpa.
bg.
biz.
br.
cat.
ch.
cz.
eu.
gov.
kg.
li.
lk.
museum.
na.
nu.
org.
pm.
pr.
pt.
se.
th.
tm.
uk.
us.
xn--0zwm56d.
xn--11b5bs3a9aj6g.
xn--80akhbyknj4f.
xn--9t4b11yi5a.
xn--deba0ad.
xn--g6w251d.
xn--hgbk6aj7f53bba.
xn--hlcj6aya9esc7a.
xn--jxalpdlp.
xn--kgbechtv.
xn--zckzah.
[octopus:~]%