dnssec.json 8.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417
  1. {
  2. "title":"DNSSEC and DANE",
  3. "description":"Method of validating a DNS response against a trusted root server. Mitigates various attacks that could reroute a user to a fake site while showing the real URL for the original site.",
  4. "spec":"https://tools.ietf.org/html/rfc4033",
  5. "status":"other",
  6. "links":[
  7. {
  8. "url":"https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions",
  9. "title":"Wikipedia - DNSSEC"
  10. },
  11. {
  12. "url":"https://bugs.chromium.org/p/chromium/issues/detail?id=50874",
  13. "title":"Chrome implementation bug"
  14. },
  15. {
  16. "url":"https://bugzilla.mozilla.org/show_bug.cgi?id=672600",
  17. "title":"Firefox implementation bug"
  18. }
  19. ],
  20. "bugs":[
  21. ],
  22. "categories":[
  23. "Security"
  24. ],
  25. "stats":{
  26. "ie":{
  27. "5.5":"a #1",
  28. "6":"a #1",
  29. "7":"a #1",
  30. "8":"a #1",
  31. "9":"a #1",
  32. "10":"a #1",
  33. "11":"a #1"
  34. },
  35. "edge":{
  36. "12":"a #1",
  37. "13":"a #1",
  38. "14":"a #1",
  39. "15":"a #1",
  40. "16":"a #1",
  41. "17":"a #1",
  42. "18":"a #1",
  43. "79":"a #1",
  44. "80":"a #1",
  45. "81":"a #1",
  46. "83":"a #1",
  47. "84":"a #1",
  48. "85":"a #1",
  49. "86":"a #1"
  50. },
  51. "firefox":{
  52. "2":"a #1",
  53. "3":"a #1",
  54. "3.5":"a #1",
  55. "3.6":"a #1",
  56. "4":"a #1",
  57. "5":"a #1",
  58. "6":"a #1",
  59. "7":"a #1",
  60. "8":"a #1",
  61. "9":"a #1",
  62. "10":"a #1",
  63. "11":"a #1",
  64. "12":"a #1",
  65. "13":"a #1",
  66. "14":"a #1",
  67. "15":"a #1",
  68. "16":"a #1",
  69. "17":"a #1",
  70. "18":"a #1",
  71. "19":"a #1",
  72. "20":"a #1",
  73. "21":"a #1",
  74. "22":"a #1",
  75. "23":"a #1",
  76. "24":"a #1",
  77. "25":"a #1",
  78. "26":"a #1",
  79. "27":"a #1",
  80. "28":"a #1",
  81. "29":"a #1",
  82. "30":"a #1",
  83. "31":"a #1",
  84. "32":"a #1",
  85. "33":"a #1",
  86. "34":"a #1",
  87. "35":"a #1",
  88. "36":"a #1",
  89. "37":"a #1",
  90. "38":"a #1",
  91. "39":"a #1",
  92. "40":"a #1",
  93. "41":"a #1",
  94. "42":"a #1",
  95. "43":"a #1",
  96. "44":"a #1",
  97. "45":"a #1",
  98. "46":"a #1",
  99. "47":"a #1",
  100. "48":"a #1",
  101. "49":"a #1",
  102. "50":"a #1",
  103. "51":"a #1",
  104. "52":"a #1",
  105. "53":"a #1",
  106. "54":"a #1",
  107. "55":"a #1",
  108. "56":"a #1",
  109. "57":"a #1",
  110. "58":"a #1",
  111. "59":"a #1",
  112. "60":"a #1",
  113. "61":"a #1",
  114. "62":"a #1",
  115. "63":"a #1",
  116. "64":"a #1",
  117. "65":"a #1",
  118. "66":"a #1",
  119. "67":"a #1",
  120. "68":"a #1",
  121. "69":"a #1",
  122. "70":"a #1",
  123. "71":"a #1",
  124. "72":"a #1",
  125. "73":"a #1",
  126. "74":"a #1",
  127. "75":"a #1",
  128. "76":"a #1",
  129. "77":"a #1",
  130. "78":"a #1",
  131. "79":"a #1",
  132. "80":"a #1",
  133. "81":"a #1",
  134. "82":"a #1",
  135. "83":"a #1"
  136. },
  137. "chrome":{
  138. "4":"a #1",
  139. "5":"a #1",
  140. "6":"a #1 #2",
  141. "7":"a #1 #2",
  142. "8":"a #1 #2",
  143. "9":"a #1 #2",
  144. "10":"a #1 #2",
  145. "11":"a #1 #2",
  146. "12":"a #1 #2",
  147. "13":"a #1 #2",
  148. "14":"a #1 #2",
  149. "15":"a #1 #2",
  150. "16":"a #1 #2",
  151. "17":"a #1 #2",
  152. "18":"a #1 #2",
  153. "19":"a #1 #2",
  154. "20":"a #1 #2",
  155. "21":"a #1 #2",
  156. "22":"a #1 #2",
  157. "23":"a #1 #2",
  158. "24":"a #1 #2",
  159. "25":"a #1 #2",
  160. "26":"a #1 #2",
  161. "27":"a #1 #2",
  162. "28":"a #1 #2",
  163. "29":"a #1 #2",
  164. "30":"a #1 #2",
  165. "31":"a #1",
  166. "32":"a #1",
  167. "33":"a #1",
  168. "34":"a #1",
  169. "35":"a #1",
  170. "36":"a #1",
  171. "37":"a #1",
  172. "38":"a #1",
  173. "39":"a #1",
  174. "40":"a #1",
  175. "41":"a #1",
  176. "42":"a #1",
  177. "43":"a #1",
  178. "44":"a #1",
  179. "45":"a #1",
  180. "46":"a #1",
  181. "47":"a #1",
  182. "48":"a #1",
  183. "49":"a #1",
  184. "50":"a #1",
  185. "51":"a #1",
  186. "52":"a #1",
  187. "53":"a #1",
  188. "54":"a #1",
  189. "55":"a #1",
  190. "56":"a #1",
  191. "57":"a #1",
  192. "58":"a #1",
  193. "59":"a #1",
  194. "60":"a #1",
  195. "61":"a #1",
  196. "62":"a #1",
  197. "63":"a #1",
  198. "64":"a #1",
  199. "65":"a #1",
  200. "66":"a #1",
  201. "67":"a #1",
  202. "68":"a #1",
  203. "69":"a #1",
  204. "70":"a #1",
  205. "71":"a #1",
  206. "72":"a #1",
  207. "73":"a #1",
  208. "74":"a #1",
  209. "75":"a #1",
  210. "76":"a #1",
  211. "77":"a #1",
  212. "78":"a #1",
  213. "79":"a #1",
  214. "80":"a #1",
  215. "81":"a #1",
  216. "83":"a #1",
  217. "84":"a #1",
  218. "85":"a #1",
  219. "86":"a #1",
  220. "87":"a #1",
  221. "88":"a #1",
  222. "89":"a #1"
  223. },
  224. "safari":{
  225. "3.1":"a #1",
  226. "3.2":"a #1",
  227. "4":"a #1",
  228. "5":"a #1",
  229. "5.1":"a #1",
  230. "6":"a #1",
  231. "6.1":"a #1",
  232. "7":"a #1",
  233. "7.1":"a #1",
  234. "8":"a #1",
  235. "9":"a #1",
  236. "9.1":"a #1",
  237. "10":"a #1",
  238. "10.1":"a #1",
  239. "11":"a #1",
  240. "11.1":"a #1",
  241. "12":"a #1",
  242. "12.1":"a #1",
  243. "13":"a #1",
  244. "13.1":"a #1",
  245. "14":"a #1",
  246. "TP":"a #1"
  247. },
  248. "opera":{
  249. "9":"a #1",
  250. "9.5-9.6":"a #1",
  251. "10.0-10.1":"a #1",
  252. "10.5":"a #1",
  253. "10.6":"a #1",
  254. "11":"a #1",
  255. "11.1":"a #1",
  256. "11.5":"a #1",
  257. "11.6":"a #1",
  258. "12":"a #1",
  259. "12.1":"a #1",
  260. "15":"a #1",
  261. "16":"a #1",
  262. "17":"a #1",
  263. "18":"a #1",
  264. "19":"a #1",
  265. "20":"a #1",
  266. "21":"a #1",
  267. "22":"a #1",
  268. "23":"a #1",
  269. "24":"a #1",
  270. "25":"a #1",
  271. "26":"a #1",
  272. "27":"a #1",
  273. "28":"a #1",
  274. "29":"a #1",
  275. "30":"a #1",
  276. "31":"a #1",
  277. "32":"a #1",
  278. "33":"a #1",
  279. "34":"a #1",
  280. "35":"a #1",
  281. "36":"a #1",
  282. "37":"a #1",
  283. "38":"a #1",
  284. "39":"a #1",
  285. "40":"a #1",
  286. "41":"a #1",
  287. "42":"a #1",
  288. "43":"a #1",
  289. "44":"a #1",
  290. "45":"a #1",
  291. "46":"a #1",
  292. "47":"a #1",
  293. "48":"a #1",
  294. "49":"a #1",
  295. "50":"a #1",
  296. "51":"a #1",
  297. "52":"a #1",
  298. "53":"a #1",
  299. "54":"a #1",
  300. "55":"a #1",
  301. "56":"a #1",
  302. "57":"a #1",
  303. "58":"a #1",
  304. "60":"a #1",
  305. "62":"a #1",
  306. "63":"a #1",
  307. "64":"a #1",
  308. "65":"a #1",
  309. "66":"a #1",
  310. "67":"a #1",
  311. "68":"a #1",
  312. "69":"a #1",
  313. "70":"a #1",
  314. "71":"a #1"
  315. },
  316. "ios_saf":{
  317. "3.2":"a #1",
  318. "4.0-4.1":"a #1",
  319. "4.2-4.3":"a #1",
  320. "5.0-5.1":"a #1",
  321. "6.0-6.1":"a #1",
  322. "7.0-7.1":"a #1",
  323. "8":"a #1",
  324. "8.1-8.4":"a #1",
  325. "9.0-9.2":"a #1",
  326. "9.3":"a #1",
  327. "10.0-10.2":"a #1",
  328. "10.3":"a #1",
  329. "11.0-11.2":"a #1",
  330. "11.3-11.4":"a #1",
  331. "12.0-12.1":"a #1",
  332. "12.2-12.4":"a #1",
  333. "13.0-13.1":"a #1",
  334. "13.2":"a #1",
  335. "13.3":"a #1",
  336. "13.4-13.7":"a #1",
  337. "14":"a #1"
  338. },
  339. "op_mini":{
  340. "all":"a #1"
  341. },
  342. "android":{
  343. "2.1":"a #1",
  344. "2.2":"a #1",
  345. "2.3":"a #1",
  346. "3":"a #1",
  347. "4":"a #1",
  348. "4.1":"a #1",
  349. "4.2-4.3":"a #1",
  350. "4.4":"a #1",
  351. "4.4.3-4.4.4":"a #1",
  352. "81":"a #1"
  353. },
  354. "bb":{
  355. "7":"a #1",
  356. "10":"a #1"
  357. },
  358. "op_mob":{
  359. "10":"a #1",
  360. "11":"a #1",
  361. "11.1":"a #1",
  362. "11.5":"a #1",
  363. "12":"a #1",
  364. "12.1":"a #1",
  365. "59":"a #1"
  366. },
  367. "and_chr":{
  368. "85":"a #1"
  369. },
  370. "and_ff":{
  371. "79":"a #1"
  372. },
  373. "ie_mob":{
  374. "10":"a #1",
  375. "11":"a #1"
  376. },
  377. "and_uc":{
  378. "12.12":"a #1"
  379. },
  380. "samsung":{
  381. "4":"a #1",
  382. "5.0-5.4":"a #1",
  383. "6.2-6.4":"a #1",
  384. "7.2-7.4":"a #1",
  385. "8.2":"a #1",
  386. "9.2":"a #1",
  387. "10.1":"a #1",
  388. "11.1-11.2":"a #1",
  389. "12.0":"a #1"
  390. },
  391. "and_qq":{
  392. "10.4":"a #1"
  393. },
  394. "baidu":{
  395. "7.12":"a #1"
  396. },
  397. "kaios":{
  398. "2.5":"a #1"
  399. }
  400. },
  401. "notes":"Browsers have generally decided to not implement DNSSEC validation because the added complexity outweighs the improvements to the browser. DNSSEC is still useful as it is widely used to protect delivery of records between DNS servers, only failing to protect the delivery from the last DNS server to the browser.\r\n\r\n[Certificate transparency](https://developer.mozilla.org/en-US/docs/Web/Security/Certificate_Transparency) is widely used and tries to provide the same security as DNSSEC but by very different means.",
  402. "notes_by_num":{
  403. "1":"Does not support DNSSEC but still benefits greatly from it, as most of the security improvements are gained in the DNS-network and not in the browser.",
  404. "2":"Early versions of Chrome [experimented](https://www.imperialviolet.org/2011/06/16/dnssecchrome.html) with browser-level validation."
  405. },
  406. "usage_perc_y":0,
  407. "usage_perc_a":99.58,
  408. "ucprefix":false,
  409. "parent":"",
  410. "keywords":"DNS Security Extensions,Domain Name System Security Extensions,DNS based Authentication of Named Entities",
  411. "ie_id":"",
  412. "chrome_id":"",
  413. "firefox_id":"",
  414. "webkit_id":"",
  415. "shown":true
  416. }