Root and TLD TSIG Compliance Report : 2026-10-06T00:00:00Z
     36 dns=ok                 dnswkk=formerr,notsig
      1 dns=timeout            dnswkk=formerr,notsig
     12 dns=ok                 dnswkk=formerr,tsig-bad-sig (non RFC compliant: TSIG record in response)
     29 dns=ok                 dnswkk=malformed (non RFC compliant: malformed)
   5953 dns=ok                 dnswkk=notauth,badkey
     14 dns=timeout            dnswkk=notauth,badkey
      3 dns=refused            dnswkk=notauth,badkey
      2 dns=reset              dnswkk=notauth,badkey
      2 dns=servfail           dnswkk=notauth,badkey
      8 dns=ok                 dnswkk=notauth,badkey,proxy
     21 dns=ok                 dnswkk=notauth,badkey,tsig-bad-time
   1891 dns=ok                 dnswkk=notauth,notsig (non RFC compliant: NOTAUTH without TSIG)
      8 dns=timeout            dnswkk=notauth,notsig (non RFC compliant: NOTAUTH without TSIG)
      2 dns=servfail           dnswkk=notauth,notsig (non RFC compliant: NOTAUTH without TSIG)
      1 dns=refused            dnswkk=notauth,notsig (non RFC compliant: NOTAUTH without TSIG)
    675 dns=ok                 dnswkk=notsig
      1 dns=timeout            dnswkk=notsig
      1 dns=noaa               dnswkk=notsig,noaa
      1 dns=nxdomain           dnswkk=nxdomain,notsig
      1 dns=ok                 dnswkk=refused,badkey (non RFC compliant: rcode != NOTAUTH)
     38 dns=ok                 dnswkk=refused,notsig (non RFC compliant: REFUSED when plain DNS not REFUSED)
      1 dns=ok                 dnswkk=servfail,notsig (non RFC compliant: SERVFAIL when plain DNS not SERVFAIL)
    256 dns=ok                 dnswkk=timeout (non RFC compliant: timeout on request containing TSIG)
     41 dns=timeout            dnswkk=timeout