At a glance, #DNSSEC validation in Poland looks better than seven years ago. Now AAAA record with an invalid signature is resolved correctly only on:
- 22% of probes using IPv4 #DNS servers,
- 20% of probes when using IPv6 DNS servers for resolution.
1/2
In 2018, a record with the wrong signature was resolved correctly on more than 50% of the probes.
In the meantime, the number of #RIPE Atlas probes active in .pl has probably decreased, and only well-maintained probes remain active, so the test is likely a bit skewed toward apparent spreading of DNSSEC deployment since neglected networks are less represented now. This means that networks that might still have poor #DNSSEC validation could now be underrepresented. #RIPE_NCC
2/2
Marek Zarychta 