Small uptick in domains with long-term incorrect TLSA records

Viktor Dukhovni ietf-dane at dukhovni.org
Mon Feb 29 21:30:37 CET 2016


I am presently tracking 28 domains with wrong TLSA records that
show no sign that they are likely to be fixed soon.  Of these 19
are the same as last time:

  1post.de
  3nw.de
  allispdv.com.br
  auxio.org
  bebidaliberada.com.br
  bels.cz
  castleturing.net
  comseo.com.br
  f2h.at
  lastsip.com
  linlab.net
  nevodnet.com
  planissimo.fr
  prodnsbr.com.br
  simplesestudio.com.br
  solucoesglobais.com.br
  twsolutions.net.br
  www.co.tt
  zx.com

the good news is that 5 of the previus 25 have been addressed, but
on the other hand 9 new ones have been added:

  101host.de
  barbarassecret.com
  conjur.com.br
  lojabrum.com.br
  netlig.com.br
  nonoserver.info
  reich-trade.ch
  stric.se
  ticketmt.com.br

Don't let your own domains linger with incorrect TLSA RRs.

The stats at present:

  ~11500 passed
      29 failed

On the DNS front, still waiting for isphuset.no to upgrade PowerDNS,
and the mail.mil nameservers are still blocking TLSA record lookups.

-- 
      Viktor.


More information about the dane-users mailing list