The domains are, among others, chosen as they are browsable through zone walking.1 Furthermore, the.se zone draws importance for analysis as it was the first DNSSEC signed zone [15] in 2005, 5 years prior to the root domain, hence a high implementation is expected.
Similarly,.co is also popular for commercial host names, the zone.br has one of the largest DNS registries in South America, while the.bg domain has signed its zone more recently.
The signing key sk is used to sign the zone data and should be secret and kept offline.
It is astonishing to think that it was only in December 2011 that virtually the entire European Union, including most countries outside the euro zone, signed up to the German-inspired "fiscal compact," a misguided treaty that hard-wires austerity into governments' constitutions.
Slightly more than a third of the misconfigurations indicate a Key Signing Key that is not properly signed by its Zone Signing Key as described in "DNSSEC", hence breaking the chain of trust.
Although proposed in 1997, DNSSEC is still not widely deployed: less than 3% of the DNS resolvers validate DNSSEC records in DNS responses [24]; recent measurements of DNSSEC adoption on forward and reverse DNS trees show that less than 1% of the zones are signed, [25].
