* Lutz Donnerhacke wrote:
> Overview of 11627 signed zones:
> 1499 +804 Entry Point
> 9618 +9618 Test
> 6 -4 broken chain
> 405 +126 chained
> 0 new
> 99 +50 unreachable

I seperated testing enviroments from real deployment.
Testing zones are not further examined.

> Top 10 TLD containing DNSSec zones:
> 783 +754 RU
> 274 +32 ARPA
> 232 +15 DE
> 147 +2 COM
> 100 +48 ORG
> 88 +18 SE
> 84 +62 BR
> 69 BG
> 48 +4 NET
> 38 +38 FR

I got some information from the RU and the FR zone, so I could check those
zone more deeply.

Futhermore I checked the immediate IP neighbourhood of servers in signed
zones for other hosts assuming that the zones of those hosts are also
signed. This reveals a lot of new entries.

Finally I send e-mail about configuration errors or possible improvments to
the zonemasters of possibly errornous zones. Several of those configurations
where fixed.

--
Public production ready DNSSEC signed root at a.dnssec.thur.de, ...
. DS 47484 5 1 83BD0576C2EB42FA9E9B5B9FDD8000F2E1F30C5B
Lookaside zone for most effective DNSSEC deployment right now.
dnssec.iks-jena.de. DS 61533 5 1 CEF158A447EF2E65ACBDBDC068231E08A991A269