Small uptick in domains with long-term incorrect TLSA records

Viktor Dukhovni ietf-dane at
Mon Feb 29 21:30:37 CET 2016

I am presently tracking 28 domains with wrong TLSA records that
show no sign that they are likely to be fixed soon.  Of these 19
are the same as last time:

the good news is that 5 of the previus 25 have been addressed, but
on the other hand 9 new ones have been added:

Don't let your own domains linger with incorrect TLSA RRs.

The stats at present:

  ~11500 passed
      29 failed

On the DNS front, still waiting for to upgrade PowerDNS,
and the nameservers are still blocking TLSA record lookups.


More information about the dane-users mailing list