Root and TLD TSIG Compliance Report : 2025-07-12T00:00:00Z 36 dns=ok dnswkk=formerr,notsig 12 dns=ok dnswkk=formerr,tsig-bad-sig (non RFC compliant: TSIG record in response) 33 dns=ok dnswkk=malformed (non RFC compliant: malformed) 5639 dns=ok dnswkk=notauth,badkey 6 dns=servfail dnswkk=notauth,badkey 3 dns=refused dnswkk=notauth,badkey 3 dns=timeout dnswkk=notauth,badkey 6 dns=ok dnswkk=notauth,badkey,proxy 20 dns=ok dnswkk=notauth,badkey,tsig-bad-time 1498 dns=ok dnswkk=notauth,notsig (non RFC compliant: NOTAUTH without TSIG) 1 dns=timeout dnswkk=notauth,notsig (non RFC compliant: NOTAUTH without TSIG) 673 dns=ok dnswkk=notsig 4 dns=ok dnswkk=refused,badkey (non RFC compliant: rcode != NOTAUTH) 22 dns=ok dnswkk=refused,notsig (non RFC compliant: REFUSED when plain DNS not REFUSED) 1 dns=ok dnswkk=servfail,notsig (non RFC compliant: SERVFAIL when plain DNS not SERVFAIL) 1000 dns=ok dnswkk=timeout (non RFC compliant: timeout on request containing TSIG) 37 dns=timeout dnswkk=timeout