{
 "metric": "dnssec",
 "segment": "cz",
 "anchor": "domain",
 "label": "Czechia (domains)",
 "population": "domains in Czechia",
 "states": [
  "signed",
  "broken_chain",
  "unsigned"
 ],
 "quiet_failure_states": [
  "broken_chain",
  "unsigned"
 ],
 "measurement": "**local probe** (deliberately, ADR-0009): DNSKEY at the child, then DS at the **parent**. Denominator: `any`.",
 "why_it_matters": "`broken_chain` is the quiet failure and the reason this metric exists — DNSKEY published but no DS at the parent means the zone is signed and *unverifiable*. The operator has done the work, the dashboard says DNSSEC is on, and no resolver on earth validates it. Unsigned is merely the default.",
 "limits": "Must be measured locally. The DomainAPI health endpoint exposes no DNSSEC state and resolves DS at the child, which cannot distinguish `broken_chain` from `signed`.",
 "data_tier": "dns",
 "population_predicate": "any",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-08-11",
  "n": 203,
  "qf_pct": 46.8,
  "ci": [
   40.06,
   53.66
  ],
  "dist": {
   "signed": 53.2,
   "broken_chain": 22.66,
   "unsigned": 24.14
  },
  "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
 },
 "series": [
  {
   "day": "2026-08-01",
   "n": 109,
   "qf_pct": 35.78,
   "ci": [
    27.41,
    45.12
   ],
   "dist": {
    "signed": 64.22,
    "broken_chain": 3.67,
    "unsigned": 32.11
   },
   "snapshot": "common-crawl-domain-stratified-c150-g2500-seed20260729"
  },
  {
   "day": "2026-08-03",
   "n": 109,
   "qf_pct": 35.78,
   "ci": [
    27.41,
    45.12
   ],
   "dist": {
    "signed": 64.22,
    "broken_chain": 3.67,
    "unsigned": 32.11
   },
   "snapshot": "common-crawl-domain-stratified-c150-g2500-seed20260729"
  },
  {
   "day": "2026-08-04",
   "n": 272,
   "qf_pct": 31.99,
   "ci": [
    26.73,
    37.75
   ],
   "dist": {
    "signed": 68.01,
    "broken_chain": 6.25,
    "unsigned": 25.74
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-05",
   "n": 272,
   "qf_pct": 31.99,
   "ci": [
    26.73,
    37.75
   ],
   "dist": {
    "signed": 68.01,
    "broken_chain": 7.72,
    "unsigned": 24.26
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-11",
   "n": 203,
   "qf_pct": 46.8,
   "ci": [
    40.06,
    53.66
   ],
   "dist": {
    "signed": 53.2,
    "broken_chain": 22.66,
    "unsigned": 24.14
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/dnssec/cz"
}