Tony Finch – blog

There has been some amusement on Twitter about a blog post from Microsoft offering their security auditing services to ccTLDs. This is laughable from the DNS point of view, but fairly plausible if you consider a registry's web front end. So I thought I would do a little survey. I got a list of ccTLDs from my local copy of the root zone, and looked up their web sites in Wikipedia, then asked each one in turn what web server software it uses. Frederic Cambus suggested on Twitter that I should get the registry URLs from the IANA root zone database instead, and this turned out to be much better because of the more consistent formatting.

    dig axfr . |
    sed '/^\([A-Za-z][A-Za-z]\)[.].*/!d;
         s||\1 http://www.iana.org/domains/root/db/\1.html|' |
    sort -u |
    while read t w
    do
        r=$(curl -s $w |
            sed '/.*<b>URL for registration services:<.b> <a href="\([^">.*/!d;
                 s//\1/')
        case $r in
        '') echo "<tr><th>$t</th><td></td><td></td></tr>"
            continue;;
        esac
        s=$(curl -s -I $r | sed '/^Server: \([^^M]*\).*/!d;s//\1/')
        echo "<tr><th>$t</th><td>$r</td><td>$s</td></tr>"
    done

All the data