I am presently tracking 28 domains with wrong TLSA records that show no sign that they are likely to be fixed soon. Of these 19 are the same as last time:
1post.de 3nw.de allispdv.com.br auxio.org bebidaliberada.com.br bels.cz castleturing.net comseo.com.br f2h.at lastsip.com linlab.net nevodnet.com planissimo.fr prodnsbr.com.br simplesestudio.com.br solucoesglobais.com.br twsolutions.net.br www.co.tt zx.com
the good news is that 5 of the previus 25 have been addressed, but on the other hand 9 new ones have been added:
101host.de barbarassecret.com conjur.com.br lojabrum.com.br netlig.com.br nonoserver.info reich-trade.ch stric.se ticketmt.com.br
Don't let your own domains linger with incorrect TLSA RRs.
The stats at present:
~11500 passed 29 failed
On the DNS front, still waiting for isphuset.no to upgrade PowerDNS, and the mail.mil nameservers are still blocking TLSA record lookups.