Root and TLD TSIG Compliance Report : 2025-05-14T00:00:00Z 36 dns=ok dnswkk=formerr,notsig 12 dns=ok dnswkk=formerr,tsig-bad-sig (non RFC compliant: TSIG record in response) 33 dns=ok dnswkk=malformed (non RFC compliant: malformed) 5778 dns=ok dnswkk=notauth,badkey 3 dns=refused dnswkk=notauth,badkey 3 dns=reset dnswkk=notauth,badkey 3 dns=servfail dnswkk=notauth,badkey 1 dns=timeout dnswkk=notauth,badkey 6 dns=ok dnswkk=notauth,badkey,proxy 22 dns=ok dnswkk=notauth,badkey,tsig-bad-time 1496 dns=ok dnswkk=notauth,notsig (non RFC compliant: NOTAUTH without TSIG) 751 dns=ok dnswkk=notsig 4 dns=ok dnswkk=refused,badkey (non RFC compliant: rcode != NOTAUTH) 25 dns=ok dnswkk=refused,notsig (non RFC compliant: REFUSED when plain DNS not REFUSED) 805 dns=ok dnswkk=timeout (non RFC compliant: timeout on request containing TSIG) 49 dns=timeout dnswkk=timeout 1 dns=reset dnswkk=timeout (non RFC compliant: timeout on request containing TSIG)