flotwig / monoidic-tldr2

TLDR - A Continuously Updated Historical TLD Records Archive

This repository is updated approximately every hour with the results from DNS zone transfer attempts against the root nameservers and all existing TLD servers. This is done to keep record of zone files for various TLDs and to monitor how these zones change overtime.

View Changes in TLD DNS Data

Click here to view the list of commits and see how the various TLD & root zones change overtime.

View List of TLDs & Roots With Zone Transfers Enabled

Click here to view the list of nameservers with zone transfers enabled.

View List of TLDs & Roots With Walkable NSEC Records

Click here to view the list of nameservers with weak NSEC enabled.

Zone Transfers for Roots and TLDs

Allowing global zone transfers is sometimes considered a security vulnerability due to this functionality giving attackers the ability to easily enumerate all DNS zone data for a specific domain. This is often seen as an issue for system administrators who want to make enumeration of sub-domains and other DNS data hard for malicious actors.

However, when it comes to TLDs and the root nameservers, zone transfers are shown in a different light. Zone transfers at this level can be benificial as they are an easy way for a TLD to be transparent about its DNS changes. This project is not meant to encourage TLD DNS hosting providers to disable global zone transfers but rather to gather data on the ever-changing zone information for the Internet's TLDs.

Credit

This project was inspired by Peter Bowen's work which can be found here: https://github.com/pzb/TLDs

This is a continuation of the original project by mandatoryprogrammer, with a clean git history.