Table 1 Top-down measured misconfiguration statistics for the ccTLD .se and respective reachability by Google’s public, DNSSEC-aware, DNS resolution service
Error category | Subcategory | Misconfigurations | % | Unreachable | % |
|---|---|---|---|---|---|
DNSKEY | Total | 564 | 64.38 | 477 | 84.40 |
Not found | 261 | 29.79 | 259 | 99.23 | |
Invalidated by DS | 88 | 10.05 | 3 | 3.41 | |
KSK invalidated by ZSK | 215 | 24.54 | 214 | 99.53 | |
Valid but expired | 0 | 0 | N.A. | ||
RRSIG | Total | 1 | 0.11 | 1 | 100.00 |
Not found | 0 | 0 | N.A. | ||
Invalidated by ZSK(s) | 0 | 0 | N.A. | ||
Valid but expired | 1 | 0.11 | 1 | 100.00 | |
Invalidate RRset | 0 | 0 | N.A. | ||
General DNS failure | Total | 295 | 33.68 | 163 | 55.25 |
REFUSED | 12 | 1.37 | 11 | 91.67 | |
SERVFAIL | 191 | 21.80 | 142 | 74.35 | |
Time-out | 64 | 7.31 | 9 | 14.06 | |
No SOA | 4 | 0.46 | 0 | 0.00 | |
SOA serial differs | 24 | 2.74 | 1 | 4.17 | |
Miscellaneous | Total | 16 | 1.83 | 7 | 43.75 |
DS retracted | 14 | 1.60 | 5 | 35.71 | |
DNSKEY RR Failure | 2 | 0.23 | 2 | 100.00 | |
All categories | Total | 876 | 100 | 647 | 73.86 |