Root and TLD TSIG Compliance Report : 2023-09-01T00:00:00Z
     44 dns=ok                 dnswkk=formerr,notsig
     35 dns=ok                 dnswkk=malformed (non RFC compliant: malformed)
   7220 dns=ok                 dnswkk=notauth,badkey
      6 dns=refused            dnswkk=notauth,badkey
      6 dns=servfail           dnswkk=notauth,badkey
      3 dns=timeout            dnswkk=notauth,badkey
     13 dns=ok                 dnswkk=notauth,badkey,proxy
     43 dns=ok                 dnswkk=notauth,badkey,tsig-bad-time
      9 dns=servfail           dnswkk=notauth,badkey,tsig-bad-time
     21 dns=ok                 dnswkk=notauth,notsig (non RFC compliant: NOTAUTH without TSIG)
    910 dns=ok                 dnswkk=notsig
      3 dns=ok                 dnswkk=refused,badkey (non RFC compliant: rcode != NOTAUTH)
      9 dns=ok                 dnswkk=refused,notsig (non RFC compliant: REFUSED when plain DNS not REFUSED)
      1 dns=ok                 dnswkk=servfail,notsig (non RFC compliant: SERVFAIL when plain DNS not SERVFAIL)
    676 dns=ok                 dnswkk=timeout (non RFC compliant: timeout on request containing TSIG)
     53 dns=timeout            dnswkk=timeout